CVE-2018-15976

Adobe Technical Communications Suite (TCS) versions 1.0.5.1 and earlier are affected by an insecure library loading vulnerability (DLL hijacking) in the installer, which can lead to privilege escalation. The issue is documented as CVE-2018-15976. Based on sources, exploitation could result in hig...

CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

Design/Logic Flaw

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-12449

CVE-2018-12449 concerns DLL hijacking in the Whale browser installer up to version 0.4.3.0. Multiple sources (NVD, CVE records) describe the vulnerability and its impact as requiring local access with user interaction; CVSSv3 base score 7.8 HIGH indicating potential for high impact on confidentia...

Four Critical Flaws Patched in Adobe Digital Edition

Adobe on Tuesday issued patches for 16 vulnerabilities spanning several of its products. The most serious of those flaws, four critical glitches in Adobe Digital Edition, could enable arbitrary code-execution. Adobe Digital Editions is an reader software program used for acquiring, managing and...

Adobe Framemaker DLL Hijacking Vulnerability

Adobe FrameMaker is a page layout software provided by the American company Audobee Adobe. A DLL hijacking vulnerability exists in Adobe Framemaker 1.0.5.1 and earlier versions. An attacker can exploit this vulnerability to elevate privileges...

Adobe Releases Security Patch Updates for 11 Vulnerabilities

Adobe has released its monthly security updates to address a total of 11 vulnerabilities in Adobe Digital Editions, Framemaker, and Technical Communications Suite, of which four are rated critical and rest 7 are important in severity. Adobe has also released updated versions for Flash Player, but...

Fuji Electric Energy Savings Estimator

1. EXECUTIVE SUMMARY CVSS v3 7.3 Vendor: Fuji Electric Equipment: Fuji Electric Energy Savings Estimator Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to load a malicious DLL and execute code on the affected...

CVE-2018-6700

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key TK before 5.1.165 allows local users to execute arbitrary code via specially crafted malware...

Siemens TD Keypad Designer DLL Hijacking Vulnerability

Siemens TD Keypad Designer is a keyboard design program from Siemens Germany for Siemens TD 100C and other products. A DLL hijacking vulnerability exists in SIEMENS TD Keypad Designer all versions. An attacker could exploit the vulnerability to execute code with the privileges of the user running...

CVE-2018-13806

CVE-2018-13806 is a DLL hijacking vulnerability in Siemens TD Keypad Designer (all versions). The root cause is an uncontrolled search path element that could allow code execution with the user’s privileges when a TD project is opened. The attacker must have write access to the directory containi...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

Design/Logic Flaw

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

ICSA-18-254-03 Siemens TD Keypad Designer

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: TD Keypad Designer Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local low-privileged attacker to escalate their...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application installer (Windows) prior to version 4.5.5.342 is affected by an insecure library loading (DLL hijacking) vulnerability (CVE-2018-5003). The root cause is DLL loading during installation, enabling privilege escalation if an attacker can place a malicious l...

Dropbox 54.5.90 DLL Hijacking

Document Title: =============== Dropbox 54.4.90 - Multiples DLL Injection/Code Execution Date of Discovery: ================== 2018-08-24 Exploitation Technique: ======================= Local Platfom Tested: =============== Windows 10 Technical Details & Description:...