123 matches found
CoD-MW-Warzone-2---CVE-2023-38821
CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...
CVE-2015-6132
CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...
CVE-2020-9442
Exploit Title: OpenVPN Connect for Windows MSI - 3.1.0.361 - Privilege Escalation Date: 2020-02-28 Author: Andrew Hess Software Link: https://openvpn.net/client-connect-vpn-for-windows/ Version: 3.1.0.361 MSI CVE: CVE-2020-9442 History 2019.12.15 - Vulnerability discovered 2019.12.15 - Initial...
CVE-2020-1337
CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...
CVE-2026-66804-CrossDevice-LPE
CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...
Corsair---DLL-Planting-CVE-2023-38822
Corsair---DLL-Planting-CVE-2023-38822 DLL Planting in the Corsair iCUE v.5.3.102 CVE-2023-38822 Discoverer: Idan Malihi Description An issue in Corsair iCUE v.5.3.102 allows a local attacker to execute arbitrary code via the MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll, and MSASN1.dll components...
CVE-2026-66804-CrossDevice-Service-EoP
CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...
CVE-2026-66804
CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...
DLL-Planting-Slack-4.33.73-CVE-2023-38820
DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting in the Slack 4.33.73 - CVE-2023-38820 Discoverer: Idan Malihi Description An issue in Slack Slack v.4.33.73 allows a local attacker to execute arbitrary code via the DLL loading mechanism in profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll,...
Metalama allows local code execution through DLL planting in shared temporary directories
Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...
GHSA-M6WQ-39M7-9XPP Metalama allows local code execution through DLL planting in shared temporary directories
Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...
Exploit for CVE-2026-66804
CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...
CVE-2025-13670
The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...
CVE-2025-13665
The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...
CVE-2025-13670 High Level Synthesis Compiler Security Advisory
The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...
CVE-2025-13665 Quartus Prime Standard Security Advisory
The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...
CVE-2025-13665 Quartus Prime Standard Security Advisory
The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...
CVE-2025-13665
Technical details about CVE-2025-13665 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.
