ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Datacard MF19 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF19 0V1.0.0B04 PCWMOBILISALGV1.0.0B03 mobilis Insecure Permissions Local Privilege Escalation & PoC Local crash & DLL Hijacking Exploit mmsdllr.dll, mediaplayerdll.dll Date: 1/01/2015 Author: Hadji Samir [email protected] Link...

Huawei eSpace Desktop V200R003C00 has multiple untrusted search path vulnerabilities

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. Multiple untrusted search path vulnerabilities exist in versions prior to Huawei eSpace Desktop V200R003C00, which allow local users to execute arbitrary code and perform DLL hijacking attacks via the Trojan horse...

UCell Software For ZTE Modems DLL Hijacking

/ Exploit Title: UCell Software for ZTE Modems quserex.dll Path Subversion Local Privilege Escalation Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://ucell.uz/en/subscribers/devices/modems/upgradeyourmodem Tested on: windows 7 / include BOOL WINAPI DllMain HANDLE...

iFunbox 2014 3.4.697.652 DLL Hijacking

/ Exploit Title:iFunbox 2014 3.4.697.652 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://i-funbox.com/ Soft link :http://dl.i-funbox.com/ifunbox2014setup.exe Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE...

iExplorer 3.6.3.0 DLL Hijacking

/ Exploit Title: iExplorer 3.6.3.0 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.macroplant.com/ Soft link :http://www.macroplant.com/downloads Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE hinstDLL,...

Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking

/ Exploit Title: Phoenix Service Software 2012.16.004.48159Nokia DLL Hijacking Exploit phoenixresources.dll,iagnosticlog.dll,phoenixresources.dll,diagnosticlog.dll Date: 25/12/2014 Author:Hadji Samir [email protected] Version: 2012.16.004.48159 Vendor Homepage: http://www.Nokia.com/ Tested on:...

MobiConnect 23.009.17.00.216 Privilege Escalation / DLL Hijacking

/ Exploit Title: MobiConnect 23.009.17.00.216 HUAWEI Insecure Permissions Local Privilege Escalation & DLL Hijacking Exploit wintab32.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.mobilis.dz/entreprises/mobiconnect.php Vendor: http://www.huawei.com/ Tested o...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Huawei eSpace Desktop (pre-V200R003C00) is affected by DLL Hijacking involving mfc71enu.dll, mfc71loc.dll, tcapi.dll and airpcap.dll. The vulnerability, described as untrusted search path leading to arbitrary code execution, relies on loading these libraries via Trojan-horse scenarios. Multiple C...

Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities: 1 The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. Vulnerability ID: HWPSIRT-2014-1151 This vulnerability has been assigned Common...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

CVE-2014-8359

CVE-2014-8359 corresponds to an untrusted search path vulnerability in Huawei Mobile Partner for Windows (version 23.009.05.03.1014) that enables local privilege escalation via DLL hijacking. An attacker could place a crafted wintab32.dll in the Mobile Partner directory to execute arbitrary code ...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Design/Logic Flaw

Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory...

CVE-2014-0619

Hamster Free ZIP Archiver 2.0.1.7 is affected by a DLL hijacking vulnerability (dwmapi.dll) in the current working directory, enabling local users to achieve arbitrary code execution. The issue stems from an untrusted search path, as reported for CVE-2014-0619, with exploit details showing a Troj...

CVE-2014-0619

Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory...