CVE-2023-3181: Creation of Temporary File in Directory with Insecure Permissions

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

Design/Logic Flaw

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

PT-2024-14255 · Regify · Regify Regipay Client For Windows

Name of the Vulnerable Software and Affected Versions: Regify Regipay Client for Windows version 4.5.1.0 Description: An issue was discovered in Regify Regipay Client for Windows that allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is...

CVE-2023-51711: Uncontrolled Search Path Element

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2023-51711

CVE-2023-51711 affects Regify Regipay Client for Windows, version 4.5.1.0. The issue is a DLL hijacking vulnerability that permits the execution of arbitrary code when the product runs. The Red Hat/CNNVD entries corroborate the DLL hijack description and the target is Regipay Client for Windows 4...

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

A malicious package uploaded to the npm registry has been found deploying a sophisticated remote access trojan on compromised Windows machines. The package, named "oscompatible," was published on January 9, 2024, attracting a total of 380 downloads before it was taken down. oscompatible included ...

CVE-2024-22410: Untrusted Search Path

Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute...

CVE-2023-29445

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM...

CVE-2023-29445

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM...

CVE-2023-29445

CVE-2023-29445 describes an Uncontrolled Search Path Element (DLL hijacking) in PTC Kepware KepServerEX. The vulnerability affects KepServerEX (and related ThingWorx Kepware Server) when a malicious DLL is loaded via the installer or binary search path, enabling a locally authenticated attacker t...

CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM...

CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM...

CVE-2023-29444 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their...

CVE-2023-29444

CVE-2023-29444 is an Uncontrolled Search Path Element (DLL hijacking) vulnerability affecting Kepware KepServerEX and related Kepware products. A locally authenticated attacker could escalate privileges to SYSTEM by loading a malicious DLL (and, per CISA ICS advisory, could lead to code execution...

CVE-2023-29445: Uncontrolled Search Path Element

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM...

CVE-2023-29444: Uncontrolled Search Path Element

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their...