Command Execution Vulnerability in Kingdee Wisdom Store Edition Client Software

Developed by YouShang.com, an e-commerce service website under Kingdee International Software Group HK Code: 268, WisdomJournal is China's first free management software tailored for individual merchants to manage their sales and inventories, with the core value of "accurate quotes and clear...

Command Execution Vulnerability in Huaan Securities Dazhi Professional Edition

Dawei Professional is a securities market analysis system with online trading system included. Huaan Securities Dazhi Professional Edition suffers from a command execution vulnerability, which can be exploited by an attacker to inject an executable DLL file into a client process to perform...

Command Execution Vulnerability in Programming Cat PC Client

Programming Cat is a fun programming software developed for children and teenagers over 8 years old. Programming Cat computer client has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Command Execution Vulnerability in Huaan Securities Options Bowl

Huaan Securities Options Bao is an individual stock options online trading Qianlong version of the client is a set of individual stock options quotes, strategies, trading in one of the professional terminal. Huaan Securities Options Treasure suffers from a command execution vulnerability, which c...

Programming Cat Format Factory Command Execution Vulnerability

Programming Cat Format Factory is a useful programming format conversion tool. Programming Cat Format Factory suffers from a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to perform arbitrary functions...

Command Execution Vulnerability in Yimin Love Stocks

Yimeng love stock speculation is Yimeng efforts to create, the first support for stock speculation personality customization of lightweight stock speculation software. The EML AiShaoware has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file in...

DLL Hijacking Vulnerability in Yimin Master Gold Nuggets Client Software

Founded in 2005, Yimin Co., Ltd. provides customers with three major businesses, namely, securities assisted decision-making software, investor education, and investment consulting, and is committed to improving the profitability of its users. Tencent is the second largest shareholder of the...

Microsoft Windows DrawIconEx Local Privilege Escalation Exploit

This Metasploit module exploits CVE-2020-1054, an out of bounds write reachable from DrawIconEx within win32k. The out of bounds write can be used to overwrite the pvbits of a SURFOBJ. By utilizing this vulnerability to execute controlled writes to kernel memory, an attacker can gain arbitrary co...

PowerSploit

This is an offensive tool for Windows PowerShell exploitation. The repository contains a PowerShell post-exploitation framework called PowerSploit, which provides various tools for exploiting vulnerabilities in Windows systems. The framework includes modules for antivirus bypass, code execution,...

CVE-2020-25738

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

Design/Logic Flaw

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

CVE-2020-25738

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

CVE-2020-25738

CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 is affected. The issue involves injecting a DLL into a process that normally has credential access (e.g., Chrome) to bypass a Credential Theft protection mechanism, enabling access to credentials read from a SQLite database. The impact is crede...

Code injection

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths...

Command Execution Vulnerability in Spin Master OCR at Xiamen Printed Information Technology Co.

Turn Master OCR Software is an OCR text recognition software. Xiamen PrintMaster OCR has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Command Execution Vulnerability in Spin Master PDF Editor of Xiamen Printed Information Technology Co.

Turn Master PDF Editor is a processing PDF editor. Xiamen Printed Information Technology Co., Ltd Turn Master PDF Editor has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Tianjin XunReader Technology Co., Ltd. XunReader PDF Command Execution Vulnerability

Read PDF Master is a professional PDF viewing tool. Tianjin XunReader Technology Co., Ltd. XunReader PDF there is a command execution vulnerability, an attacker can use this vulnerability in the client process to inject executable DLL file to obtain control of the server...

CVE-2020-7315

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

Design/Logic Flaw

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

CVE-2020-7315

CVE-2020-7315 is a DLL-injection vulnerability in McAfee Agent (Windows) prior to version 5.6.6. The issue allows local attackers to execute arbitrary code by carefully placing a malicious DLL. Technical details from connected sources indicate the root cause involves improper filtering during con...