689 matches found
CVE-2023-43625
CVE-2023-43625 affects Siemens/Simcenter Amesim prior to v2021.1. A SOAP endpoint in the application can be reached by unauthenticated remote attackers to perform DLL injection and execute arbitrary code in the Amesim process. The issue is documented across multiple sources (including Red Hat and...
CVE-2023-43625
A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...
CVE-2023-43625: Improper Control of Generation of Code
A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...
Siemens Simcenter Amesim
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2022-47631
Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if they deny write access for the SYSTEM...
New Mockingjay Process Injection Technique Could Let Malware Evade Detection
A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to execute malicious code on compromised systems. "The injection is executed without space allocation, setting permissions or even starting a thread," Security Joes researchers...
CVE-2023-30237
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
Design/Logic Flaw
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
CyberGhostVPN 代码问题漏洞
CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN Windows Client versions prior to v8.3.10.10015, which was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
CVE-2023-30237
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
CVE-2023-30237
CVE-2023-30237 affects CyberGhostVPN Windows Client releases before 8.3.10.10015. The vendor component Dashboard.exe is implicated in a DLL injection/elevation-of-privilege scenario via a privileged Windows service communication channel (named pipe MachineNameCyberGhost8Service). Public details d...
CVE-2023-30237
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
CVE-2023-30237: Uncontrolled Search Path Element
CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...
PT-2023-22597 · Cyberghost · Cyberghostvpn Windows Client
Name of the Vulnerable Software and Affected Versions: CyberGhostVPN Windows Client versions prior to 8.3.10.10015 Description: A DLL injection issue was found in the Dashboard.exe component of the CyberGhostVPN Windows Client. Recommendations: For versions prior to 8.3.10.10015, update to versio...
Metasploit Weekly Wrap-Up
Throw another log file on the fire Our own Stephen Fewer authored a module targeting CVE-2023-26360 affecting ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier. The vulnerability allows multiple paths to code execution, but our module works by leveraging a...
CVE-2022-32972
Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation...
Privilege escalation
Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation...
CVE-2022-32972
Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation...