CVE-2020-25738

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

Design/Logic Flaw

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

CVE-2020-25738

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

CVE-2020-25738

CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 is affected. The issue involves injecting a DLL into a process that normally has credential access (e.g., Chrome) to bypass a Credential Theft protection mechanism, enabling access to credentials read from a SQLite database. The impact is crede...

CVE-2020-25738: Uncontrolled Search Path Element

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

PT-2020-16178

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager EPM version 11.1.0.173 Description The issue allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process...

Code injection

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths...

Command Execution Vulnerability in Spin Master OCR at Xiamen Printed Information Technology Co.

Turn Master OCR Software is an OCR text recognition software. Xiamen PrintMaster OCR has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Command Execution Vulnerability in Spin Master PDF Editor of Xiamen Printed Information Technology Co.

Turn Master PDF Editor is a processing PDF editor. Xiamen Printed Information Technology Co., Ltd Turn Master PDF Editor has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to gain control of the server...

Tianjin XunReader Technology Co., Ltd. XunReader PDF Command Execution Vulnerability

Read PDF Master is a professional PDF viewing tool. Tianjin XunReader Technology Co., Ltd. XunReader PDF there is a command execution vulnerability, an attacker can use this vulnerability in the client process to inject executable DLL file to obtain control of the server...

CVE-2020-7315

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

Design/Logic Flaw

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

CVE-2020-7315

CVE-2020-7315 is a DLL-injection vulnerability in McAfee Agent (Windows) prior to version 5.6.6. The issue allows local attackers to execute arbitrary code by carefully placing a malicious DLL. Technical details from connected sources indicate the root cause involves improper filtering during con...

CVE-2020-7315 DLL Injection vulnerability in MA for Windows

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

PT-2020-19547

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.6.6 Description The issue allows local users to execute arbitrary code via careful placement of a malicious DLL. This is a result of a DLL injection vulnerability. Recommendations For versions prior...

CVE-2020-7315: Untrusted Search Path

DLL Injection Vulnerability in McAfee Agent MA for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL...

DLL Injection in kerberos

Version of kerberos prior to 1.0.0 are vulnerable to DLL Injection. The package loads DLLs without specifying a full path. This may allow attackers to create a file with the same name in a folder that precedes the intended file in the DLL path search. Doing so would allow attackers to execute...

GHSA-M2MX-RFPW-JGHV DLL Injection in kerberos

Version of kerberos prior to 1.0.0 are vulnerable to DLL Injection. The package loads DLLs without specifying a full path. This may allow attackers to create a file with the same name in a folder that precedes the intended file in the DLL path search. Doing so would allow attackers to execute...

powerSploit

This is an offensive tool for Windows. It is a PowerShell module called PowerSploit, which is a framework for penetration testing and red teaming. The module includes various tools for tasks such as antivirus bypass, code execution, and DLL injection. The primary vulnerability targeted by this to...

CVE-2020-24574

The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...