CVE-2019-12574

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

Design/Logic Flaw

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

CVE-2019-12574

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

CVE-2019-12574

The CVE-2019-12574 entry concerns the London Trust Media Private Internet Access (PIA) VPN Client for Windows (v1.0). It is vulnerable to a DLL injection flaw during the software updater process: the updater loads multiple libraries from a folder that authenticated users can write to, enabling a ...

DLL Injection

github.com/golang/sys is vulnerable to DLL injection. The vulnerability is possible because it does not properly load system DLLs using an absolute path name, allowing an attacker with certain privileges to perform inject arbitrary DLLs into the application...

AZL-78966 CVE-2019-9634 affecting package golang 1.25.7-1

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

Design/Logic Flaw

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

CVE-2019-9634

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

CVE-2019-9634

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

CVE-2019-9634

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

CVE-2019-9634

Removed by vendor...

CVE-2019-9634

CVE-2019-9634 targets Go on Windows, where improper use of LoadLibrary in Go 1.12 can enable DLL injection. The vulnerability arises from how the runtime loads DLLs, enabling potential arbitrary code execution if a malicious DLL is loaded. Several connected sources corroborate the Windows DLL-inj...

CVE-2019-9634

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...

PT-2019-19768 · Google · Go

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.12.2 Description: The issue is related to the misuse of certain LoadLibrary functionality in Go on Windows, leading to DLL injection. Recommendations: For Go versions prior to 1.12.2, update to version 1.12.2 or later t...

The Fileless, Non-Malware Menace

There’s an old expression: if it looks like a duck, walks like a duck, and quacks like a duck, then it must be a duck. What happens, though, if the duck in question is malware that doesn’t behave like typical malware? Namely, it doesn’t drop a file on your disk to infect your computer, hijack...

Pe-Sieve - Recognizes And Dumps A Variety Of Potentially Malicious Implants (Replaced/Injected PEs, Shellcodes, Hooks, In-Memory Patches)

PE-sieve is a light-weight tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory...

PortSwigger Web Security: Privilege Escalation by abusing non-existent path. (Windows)

Vulnerability Overview When Burpsuite runs, it tries to load some DLLs in the path C:\Program%20Files. Because the folder doesn't exists, it can be created by a low-privileged user which can inject arbitrary DLL into the process when another privileged user runs Burpsuite. I have verified the...

CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

Design/Logic Flaw

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

CVE-2018-11072

Dell Digital Delivery prior to version 3.5.1 is affected by a DLL injection vulnerability that can enable a local authenticated attacker, with knowledge of the application workflow, to load and execute a malicious DLL with administrator privileges. The issue stems from how the vulnerable DLL is l...