4222 matches found
CVE-2018-7484
An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...
Design/Logic Flaw
An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...
CVE-2018-7484
Summary: CVE-2018-7484 affects PureVPN on Windows up to 5.19.4.0. The installer grants Everyone Full Control to the installation directory, and PureVPNService.exe (running as NT Authority\SYSTEM) loads DLLs via relative paths. If the program starts from a directory that is writable by all users a...
CVE-2018-7484
An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...
PureVPN Windows Elevation of Privilege Vulnerability
PureVPN is a paid VPN service. An elevation of privilege vulnerability exists in PureVPN for Windows version 5.19.4.0 and earlier. An attacker can exploit this vulnerability via DLL hijacking to achieve elevation of privilege...
Mozilla Firefox/Thunderbird/SeaMonkey Untrusted Search Path Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Thunderbird is an email client developed by the Mozilla Foundation that is independent from the Mozilla Application Suite and supports IMAP, POP mail protocols, and HTML mail. Mozilla SeaMonkey is a free, open sourc...
CVE-2018-6218
CVE-2018-6218 describes a DLL hijacking issue in Trend Micro’s User-Mode Hooking Module (UMH). The root cause is insecure DLL loading (DLL search order) in Trend Micro products, enabling arbitrary code execution if a malicious DLL is located where the installer/UMH loader loads it. Public documen...
CVE-2018-6218
A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module UMH could allow an attacker to run arbitrary code on a vulnerable system...
Microsoft Won't Patch a Severe Skype Vulnerability Anytime Soon
A serious vulnerability has been discovered in Microsoft-owned most popular free web messaging and voice calling service Skype that could potentially allow attackers to gain full control of the host machine by granting system-level privileges to a local, unprivileged user. The worst part is that...
CVE-2017-1711
CVE-2017-1711 affects IBM iNotes 8.5 and 9.0 SUService. The vulnerability arises from the risk of loading a malicious DLL masquerading as a Windows DLL located in the temp directory, potentially allowing code execution. Connected documents reiterate the same issue and reference IBM X-Force ID 134...
Microsoft Skype DLL Hijacking
Hi @ll, since about two or three years now, Microsoft offers Skype as optional update on Windows/Microsoft Update. JFTR: for Microsoft's euphemistic use of "update" see Once installed, Skype uses its own proprietary update mechanism instead of Windows/Microsoft Update: Skype periodically runs...
WINCVS 2009R2 DLL Hijacking
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVS-SUITE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txt + ISR: Apparition Security Vendor: ============= march-hare.com Product: =========== WINCVS 2009R2 CVS Suite is a...
CVE-2018-6318
In Sophos Tester Tool 3.2.0.7 Beta, the driver loads in the context of the application used to test an exploit or ransomware the DLL using a payload that runs from NTDLL.DLL so, it's run in userland, but the driver doesn't perform any validation of this DLL not its signature, not its hash, etc.. ...
CVE-2018-6318
The CVE-2018-6318 entry applies to Sophos Tester Tool 3.2.0.7 Beta. The vulnerability is a DLL hijacking flaw where the driver loads a DLL from userland (NTDLL.DLL) without validating the DLL’s signature or hash. An attacker could replace the DLL with a malicious one (locally or via remote access...
CVE-2018-6318
In Sophos Tester Tool 3.2.0.7 Beta, the driver loads in the context of the application used to test an exploit or ransomware the DLL using a payload that runs from NTDLL.DLL so, it's run in userland, but the driver doesn't perform any validation of this DLL not its signature, not its hash, etc.. ...
CVE-2018-6475
In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...
Design/Logic Flaw
In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...
CVE-2018-6475
In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...
CVE-2018-6475
CVE-2018-6475 affects SUPERAntiSpyware Professional Trial 6.0.1254. The issue is a DLL hijacking vulnerability in SUPERAntiSpyware.exe that enables Elevation of Privileges. Root cause: DLL loading manipulation leads to privilege escalation. Impacted software is the SUPERAntiSpyware Professional T...