290 matches found
Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns
Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. "These campaigns typically involve a recognizable infection chain involving oversized...
CVE-2024-31954
CVE-2024-31954 affects the Samsung Portable SSD for T5 installer on Windows (version 1.6.10). The root cause is tampering with the installation directory and DLLs, enabling an attacker who already has user privileges to achieve arbitrary code execution and privilege escalation. The available sour...
CVE-2024-32488
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...
CVE-2024-32488: Improper Handling of Insufficient Permissions or Privileges
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...
CVE-2024-32488
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...
CVE-2024-32488
Foxit PDF Reader and Editor versions before 2024.1 are susceptible to a Local Privilege Escalation vulnerability. The root cause is weak permissions on the update-service folder, which allows an attacker to place crafted DLL files there during update checks to elevate privileges. No specific expl...
CVE-2023-28872
Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport location...
CVE-2023-28872
Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport location...
CVE-2023-0898
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...
CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...
CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...
CVE-2023-0898
Vulnerability (CVE-2023-0898) affects General Electric MiCOM S1 Agile. The issue is an Uncontrolled Search Path Element (CWE-427) that enables code execution when an attacker places malicious DLL files in the application directory. Affected products are MiCOM S1 Agile (all versions per ICS adviso...
GE MiCOM S1 Agile
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Low attack complexity Vendor: General Electric Equipment: MiCOM S1 Agile Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to upload malicious files and...
GE MiCOM S1 Agile
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Low attack complexity Vendor : General Electric Equipment : MiCOM S1 Agile Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to upload malicious files and...
PT-2023-16600 · General Electric · General Electric Micom S1 Agile
Name of the Vulnerable Software and Affected Versions: General Electric MiCOM S1 Agile affected versions not specified Description: The issue allows an attacker to achieve code execution by placing malicious DLL files in the application's directory. Recommendations: At the moment, there is no...
USN-6006-1: .NET vulnerability
It was discovered that .NET did not properly manage dll files. An attacker could potentially use this issue to execute arbitrary code...
Foxit Reader Code Issue Vulnerability (CNVD-2023-07829)
Foxit Reader is a PDF document reader from Foxit China. Foxit Reader is vulnerable to a code issue that could be exploited by attackers to execute malicious DLL files...
Trend Micro Apex One Trust Management Issue Vulnerability
Trend Micro Apex One is an endpoint protection software from Trend Micro, Inc. Trend Micro Apex One 2019 on-prem, SaaS version has a trust management issue vulnerability that stems from the Apex One agent not being properly authenticated, which could be exploited by an attacker to load DLL files...
