689 matches found
Unitrends Backup 代码问题漏洞
Unitrends Backup is eliminating data loss, ransomware and risk. versions prior to Unitrends Backup 10.5.5 have a DLL injection vulnerability that can be exploited by attackers to escalate privileges from unprivileged users to the system...
PT-2021-23726 · Kaseya +1 · Kaseya Unitrends Backup Appliance +1
Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Unitrends Windows agent, which was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed...
DCOM abuse and lateral movement with Cobalt Strike
Introduction When researching lateral movement techniques I came across a post from Raphael Mudge of Cobalt Strike fame. He details scripting an Aggressor Script for Matt Nelson’s MMC20.Application Lateral Movement technique. Reading that post spurred me to make my own DCOM based lateral movement...
CVE-2021-36216
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...
Design/Logic Flaw
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...
CVE-2021-36216
The CVE-2021-36216 entry applies to LINE for Windows, affected in version 6.2.1.2289 and earlier. The root cause is a DLL injection flaw that permits arbitrary code execution. The vulnerability is described as local (attack vector LOCAL) with low attack complexity, and could lead to partial confi...
CVE-2021-36216: Uncontrolled Search Path Element
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...
PT-2021-21181
Name of the Vulnerable Software and Affected Versions LINE for Windows versions 6.2.1.2289 and before Description The issue allows for arbitrary code execution via malicious DLL injection. Recommendations For versions 6.2.1.2289 and before, update to a version later than 6.2.1.2289 to resolve the...
Cisco Packet Tracer for Windows DLL Injection (cisco-sa-packettracer-dll-inj-Qv8Mk5Jx)
According to its self-reported version, Cisco Packet Tracer for Windows is affected by a DLL Injection vulnerability. An authenticated, local attacker could exploit this, by inserting a configuration file in a specific path on the system, to cause a malicious DLL file to be loaded. Successful...
Cisco Packet Tracer for Windows DLL Injection Vulnerability
Cisco Packet Tracer is a cross-platform visual emulation tool that allows users to create network topologies and emulate computer networks. The vulnerability can be exploited to execute arbitrary code on the affected system with the privileges of another user account by inserting a configuration...
CVE-2021-1593
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
Design/Logic Flaw
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
CVE-2021-1593 Cisco Packet Tracer for Windows DLL Injection Vulnerability
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
CVE-2021-1593
Cisco Packet Tracer for Windows contains a DLL Injection vulnerability (CVE-2021-1593) that an authenticated, local attacker can exploit by placing a configuration file in a specific path to force loading of a malicious DLL at startup, potentially leading to arbitrary code execution with the priv...
CVE-2021-1593 Cisco Packet Tracer for Windows DLL Injection Vulnerability
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
Cisco Packet Tracer for Windows DLL Injection Vulnerability
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
PT-2021-3788
Name of the Vulnerable Software and Affected Versions Cisco Packet Tracer for Windows affected versions not specified Description A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit thi...
CVE-2021-1593: Uncontrolled Search Path Element
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling o...
