ZTE Datacard MF180 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF180 PCWTNZNZLMF180V1.0.0B02 Telecom MF180 Modem Insecure Permissions Local Privilege Escalation & PoC Local crash & Path Subversion Arbitrary DLL Injection Code Execution mmsdllr.dll Date: 10/01/2015 Author: Hadji Samir [email protected] Link...

Corel Software DLL Hijacking

1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Date of last update: 2015-01-06 Vendors contacted: Corel Release mode: User release 2...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Datacard MF19 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF19 0V1.0.0B04 PCWMOBILISALGV1.0.0B03 mobilis Insecure Permissions Local Privilege Escalation & PoC Local crash & DLL Hijacking Exploit mmsdllr.dll, mediaplayerdll.dll Date: 1/01/2015 Author: Hadji Samir [email protected] Link...

Huawei eSpace Desktop V200R003C00 has multiple untrusted search path vulnerabilities

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. Multiple untrusted search path vulnerabilities exist in versions prior to Huawei eSpace Desktop V200R003C00, which allow local users to execute arbitrary code and perform DLL hijacking attacks via the Trojan horse...

UCell Software For ZTE Modems DLL Hijacking

/ Exploit Title: UCell Software for ZTE Modems quserex.dll Path Subversion Local Privilege Escalation Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://ucell.uz/en/subscribers/devices/modems/upgradeyourmodem Tested on: windows 7 / include BOOL WINAPI DllMain HANDLE...

iFunbox 2014 3.4.697.652 DLL Hijacking

/ Exploit Title:iFunbox 2014 3.4.697.652 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://i-funbox.com/ Soft link :http://dl.i-funbox.com/ifunbox2014setup.exe Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE...

Phoenix Service Software 2012.16.004.48159(Nokia) DLL Hijacking

/ Exploit Title: Phoenix Service Software 2012.16.004.48159Nokia DLL Hijacking Exploit phoenixresources.dll,iagnosticlog.dll,phoenixresources.dll,diagnosticlog.dll Date: 25/12/2014 Author:Hadji Samir [email protected] Version: 2012.16.004.48159 Vendor Homepage: http://www.Nokia.com/ Tested on:...

MobiConnect 23.009.17.00.216 Privilege Escalation / DLL Hijacking

/ Exploit Title: MobiConnect 23.009.17.00.216 HUAWEI Insecure Permissions Local Privilege Escalation & DLL Hijacking Exploit wintab32.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.mobilis.dz/entreprises/mobiconnect.php Vendor: http://www.huawei.com/ Tested o...

iExplorer 3.6.3.0 DLL Hijacking

/ Exploit Title: iExplorer 3.6.3.0 DLL Hijacking Exploit itunesmobiledevice.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.macroplant.com/ Soft link :http://www.macroplant.com/downloads Tested on: windows 7 fr / include BOOL WINAPI DllMain HANDLE hinstDLL,...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9416

Huawei eSpace Desktop (pre-V200R003C00) is affected by DLL Hijacking involving mfc71enu.dll, mfc71loc.dll, tcapi.dll and airpcap.dll. The vulnerability, described as untrusted search path leading to arbitrary code execution, relies on loading these libraries via Trojan-horse scenarios. Multiple C...

Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities: 1 The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. Vulnerability ID: HWPSIRT-2014-1151 This vulnerability has been assigned Common...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Design/Logic Flaw

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...