4177 matches found
Microsoft Machine Debug Manager (mdm) DLL Hijacking
Microsoft Machine Debug Manager mdm DLL side loading vulnerability Vulnerability: DLL Hijacking / DLL Side Loading Advisory URL: https://ipositivesecurity.com/2017/06/15/microsoft-machine-debug-manager-mdm-insecure-library-loading-allows-code-execution/ ------------------------ ABOUT...
CVE-2017-7966
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL...
Design/Logic Flaw
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL...
CVE-2017-7966
CVE-2017-7966 describes an DLL Hijacking/Uncontrolled Search Path Element flaw in Schneider Electric SoMachine HVAC programming software. Affected product: SoMachine HVAC v2.1.0 (and earlier per ICS-CERT) with improper DLL loading enabling arbitrary code execution. NVD notes a network-exploitable...
CVE-2017-7966
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL...
Security Advisory - Multiple Security Vulnerabilities in HedEx product
HedExHuawei Electronic Documentation Explorer，Huawei electronic document browser, mainly used to browse Huawei products electronic documents. HedEx exist some vulnerabilities. HedEx has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target...
Intel SSD Toolbox 3.4.3 DLL Hijacking
Hi @ll, executable installers built with Intels Installation Framework, for example "Intel SSD Toolbox - v3.4.3.exe", available from , expose two vulnerabilities, both resulting in arbitrary code execution with escalation of privilege. Vulnerability 1: On a fully patched Windows 7 SP1 they load a...
Microsoft Azure Recovery Services Agent DLL Hijacking
Hi @ll, MARSAgentInstaller.exe, the Microsoft Azure Recovery Services Agent, available via from is vulnerable: it allows arbitrary code execution via DLL hijacking, resulting in escalation of privilege on standard installations of Windows. MARSAgentInstaller.exe version 2.0.9072.0, digitally sign...
vmware horizon client dll hijacking vulnerability
Horizon Client is used to virtualize desktops and applications. A DLL hijacking vulnerability exists in the vmware horizon client, which could allow an attacker to maliciously load a DLL and execute arbitrary commands by constructing a malicious application and placing it in a specific path...
Windows Privilege Escalation via TokenMagic (UAC Bypass)
This module leverages a UAC bypass TokenMagic in order to spawn a process/conduct a DLL hijacking attack to gain SYSTEM-level privileges. Windows 7 through Windows 10 1803 are affected. Module Options msf use exploit/windows/local/tokenmagic msf undefinedtokenmagic show actions ...actions... msf...
VMWare Horizon 5.4 DLL Hijacking
Exploit Title: vmware horizon client 5.4 - DLL Hijacking Date: date Discoverer: Owais Mehtab, Tayeeb Rana Vendor Homepage: https://vmware.com Software Link: https://my.vmware.com/web/vmware/details?productId=331&downloadGroup=VIEWCLIENTSWIN64540 Version: 5.4 5.4.0.2007 Tested on: Win7 Sp1 VMWare...
XAMPP 7.1.1-0-VC14 DLL Hijacking
Hi @ll, xampp-win32-7.1.1-0-VC14-installer.exe, available from , is vulnerable, dangerous and defective. ALL other executable installers built with BitRock InstallBuilder which of course includes BitRocks InstallBuilder itself are vulnerable and defective too. 0. DANGEROUS 0.a It instructs its...
LAquis SCADA dll Hijacking Vulnerability
LAquis SCADA is the tool and language for data collection, process supervision, industrial automation, storage and report generation for quality management and application development. LAquis SCADA suffers from a dll hijacking vulnerability. The vulnerability is caused due to the LAquis SCADA...
Oracle Java 64bit DLL Hijacking
Code Injection through DLL Sideloading in 64bit Oracle Java Metadata =================================================== Release Date: 19-March-2017 Author: Florian Bogner // https://bogner.sh Affected product: 64bit Oracle Java on Windows https://java.com/en/ Fixed in: Java SE: 7u131, 8u121; Jav...
BeRoot - Windows Privilege Escalation Tool
BeRoots is a post exploitation tool to check commun Windows misconfigurations to find a way to escalate our privilege. A compiled version is available here. It will be added to the pupy project as a post exploitation module so it will be executed all in memory without touching the disk. Except on...
China Knowledge CAJViewer reader suffers from dll hijacking vulnerability
China Knowledge CAJViewer Reader is a specialized full-text format reader for China Journal Network. China Knowledge CAJViewer Reader has a dll hijacking vulnerability, the vulnerability is due to China Knowledge CAJViewer Reader CAJVieweru.exe component is not safe to load the library file, an...
CVE-2017-3013
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...
Design/Logic Flaw
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in the OCR plugin...
Design/Logic Flaw
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...
CVE-2017-3013
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...