Lucene search
+L

4151 matches found

Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.13 views

PT-2025-3715 · Silicon · Silicon Labs (8-Bit) Ide Installer

Name of the Vulnerable Software and Affected Versions: Silicon Labs 8-bit IDE installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the Silicon Labs 8-bit IDE installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can resu...

8.6CVSS8.1AI score0.00188EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.9 views

PT-2025-3716 · Unknown · Configuration Wizard 2

Name of the Vulnerable Software and Affected Versions: Configuration Wizard 2 affected versions not specified Description: The issue is caused by an uncontrolled search path in the Configuration Wizard 2 installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation...

8.6CVSS8AI score0.00188EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.16 views

PT-2025-3724 · Usbxpress · Usbxpress

Name of the Vulnerable Software and Affected Versions: USBXpress Win 98SE Dev Kit affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer, leading to DLL hijacking vulnerabilities. This can result in privilege...

8.6CVSS8AI score0.00241EPSS
SaveExploits0References6
NVD
NVD
added 2025/01/23 10:15 p.m.24 views

CVE-2024-53588

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...

7.8CVSS0.00189EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/23 12:00 a.m.9 views

CVE-2024-53588

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...

7.8AI score0.00189EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/23 12:00 a.m.9 views

iTop VPN 代码问题漏洞

iTop VPN is a VPN software from iTop Inc. which allows users to remain anonymous and secure with advanced Salsa20 chacha20 256-bit encryption. A code issue vulnerability exists in iTop VPN version 16.0, which stems from the presence of a DLL hijacking vulnerability that allows an attacker to...

7.8CVSS7.4AI score0.00189EPSS
SaveExploits1References2
CVE
CVE
added 2025/01/23 12:00 a.m.69 views

CVE-2024-53588

Summary: CVE-2024-53588 affects iTop VPN v16.0 through a DLL hijacking flaw. An attacker who can place a crafted DLL in the path D:\ProgramData\iTop VPN\Downloader\vpn6 can achieve arbitrary code execution on the host. The CVSS score is 7.8 (HIGH); vector: local, low attack complexity, no privile...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/23 12:00 a.m.21 views

CVE-2024-53588

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...

0.00189EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/14 12:09 a.m.33 views

CVE-2025-0069 DLL Hijacking vulnerability in SAPSetup

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS0.00178EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/14 12:09 a.m.15 views

CVE-2025-0069 DLL Hijacking vulnerability in SAPSetup

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/14 12:09 a.m.89 views

CVE-2025-0069

CVE-2025-0069 describes a DLL-injection vulnerability in SAPSetup. The affected component is SAPSetup, where an attacker with local user privileges or access to a compromised Windows account can gain higher privileges, enabling lateral movement and further compromise of the Active Directory, with...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/01/04 7:52 a.m.9 views

PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps

Cybersecurity researchers have flagged a new malware called PLAYFULGHOST that comes with a wide range of information-gathering features like keylogging, screen capture, audio capture, remote shell, and file transfer/execution. The backdoor, according to Google's Mandiant Managed Defense team,...

7.3AI score
SaveExploits0
OSV
OSV
added 2025/01/02 4:15 p.m.10 views

CVE-2024-55543

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

7.8CVSS5.5AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 4:15 p.m.53 views

CVE-2024-55543

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

7.8CVSS0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/02 4:15 p.m.12 views

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

7.8CVSS5.5AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 4:15 p.m.21 views

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

7.8CVSS0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 3:25 p.m.12 views

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

6.6CVSS7.2AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 3:25 p.m.79 views

CVE-2024-55540

CVE-2024-55540 describes a local privilege escalation caused by DLL hijacking in Acronis Cyber Protect 16 for Windows (pre-build 39169). The available connected documents confirm the root cause as DLL hijacking and identify the affected product by name; no other exploit details, attacker vector, ...

7.8CVSS7.5AI score0.00165EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/02 3:25 p.m.23 views

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

6.6CVSS0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 3:24 p.m.50 views

CVE-2024-55543

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

7.3CVSS0.00166EPSS
SaveExploits0References1
Rows per page
Query Builder