CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

CVE-2024-45874

Vulnerability: CVE-2024-45874 affects VegaBird Vooki 5.2.9. Risk arises from DLL hijacking by placing a crafted DLL in the same directory as Vooki.exe, enabling arbitrary code execution and potential persistence. Affected component is the Vooki application (VegaBird Vooki 5.2.9); root cause is lo...

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

VegaBird Vooki 安全漏洞

VegaBird Vooki is a free web application vulnerability scanning tool from VegaBird Open Source that helps users to scan any web application and find vulnerabilities.Vooki consists of three main parts: a web application scanner, a Rest API scanner, and a reporting feature. VegaBird Vooki version...

CVE-2024-45873

VegaBird Yaazhini 2.0.2 is affected by a DLL hijacking vulnerability that lets an attacker place a crafted DLL in the Yaazhini.exe directory to execute arbitrary code or maintain persistence. Exploitation involves dropping a DLL (e.g., dcomp.dll) in the application folder and launching Yaazhini.e...

Notepad++ < 8.4.1 DLL hijacking vulnerability

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll UxTheme.dll with his own dll and run arbitrary code in the context of Notepad++. Note that Nessus has not tested for this issue but has instead relied only on the application's...

VegaBird Yaazhini 2.0.2 DLL Hijacking

==================================== CVE ID: CVE-2024-45873 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Free Android APK & API Vulnerability ScannerYaazhini Vulnerability Type: DLL Hijacking ==================================== ==================================== Summary...

VegaBird Vooki 5.2.9 DLL Hijacking

==================================== CVE ID: CVE-2024-45874 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Dynamic Web Application & REST API Vulnerability Scanner DAST Tool Vulnerability Type: DLL Hijacking ==================================== ==================================== Summar...

PT-2024-31825 · Vegabird · Vegabird Yaazhini

Name of the Vulnerable Software and Affected Versions: VegaBird Yaazhini version 2.0.2 Description: A DLL hijacking issue allows attackers to execute arbitrary code and maintain persistence by placing a crafted DLL file in the same directory as Yaazhini.exe. This enables them to potentially gain...

CVE-2024-6769

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...

CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...

CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...

CVE-2024-6769

CVE-2024-6769 describes a Windows DLL hijacking and Activation Context Cache poisoning chain that enables a MEDIUM integrity process to escalate to HIGH integrity (Administrator) without a UAC prompt. The exploit combines drive remapping (ROOT drive) with activation-context manipulation via CSRSS...

PT-2024-6492 · Microsoft · Windows 11 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Microsoft Windows 10 Microsoft Windows 11 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Description: A DLL Hijacking caused by drive remapping...

Microsoft多款产品 安全漏洞

Microsoft Windows and others are products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server 2016 is a desktop operating system.Microsoft Windows Server 2019 is a desktop operating system. A security vulnerability exis...

PT-2024-41365 · Yandex +1 · Telemost +1

Name of the Vulnerable Software and Affected Versions: Yandex Telemost versions prior to 2.7.0 Description: The issue is related to the use of an untrusted search path, which may allow an attacker to execute arbitrary code. This can be exploited through a DLL hijacking vulnerability...

CVE-2024-8766

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 38235, Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-34016

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 38235...

CVE-2024-8766

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 38235, Acronis Cyber Protect 16 Windows before build 39169...