689 matches found
CVE-2019-5631 Rapid7 InsightAppSec Local Privilege Escalation
The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system who must already be authenticated to the operating system can elevate their privileges with this vulnerability to the privilege level ...
CVE-2019-5631
The CVE-2019-5631 issue affects Rapid7 InsightAppSec broker, specifically the prunsrv.exe component, with a DLL injection vulnerability that allows a local authenticated user to escalate privileges to the InsightAppSec/SYSTEM level. Affected version: 2019.06.24 and earlier. The vulnerability is d...
PT-2019-17791 · Rapid7 · Insightappsec
Name of the Vulnerable Software and Affected Versions: Rapid7 InsightAppSec versions 2019.06.24 and prior Description: The issue is related to a DLL injection vulnerability in the 'prunsrv.exe' component. A local user who is already authenticated to the operating system can exploit this to elevat...
CVE-2019-5631: Uncontrolled Search Path Element
The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system who must already be authenticated to the operating system can elevate their privileges with this vulnerability to the privilege level ...
CVE-2019-12574
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...
Design/Logic Flaw
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...
CVE-2019-12574
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...
CVE-2019-12574
The CVE-2019-12574 entry concerns the London Trust Media Private Internet Access (PIA) VPN Client for Windows (v1.0). It is vulnerable to a DLL injection flaw during the software updater process: the updater loads multiple libraries from a folder that authenticated users can write to, enabling a ...
PT-2019-12864
Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version 1.0 Description A vulnerability in the London Trust Media Private Internet Access PIA VPN Client could allow an authenticated, local attacker to run arbitrary code with elevated...
CVE-2019-12574: Untrusted Search Path
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...
DLL Injection
github.com/golang/sys is vulnerable to DLL injection. The vulnerability is possible because it does not properly load system DLLs using an absolute path name, allowing an attacker with certain privileges to perform inject arbitrary DLLs into the application...
Design/Logic Flaw
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
CVE-2019-9634
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
AZL-78966 CVE-2019-9634 affecting package golang 1.25.7-1
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
CVE-2019-9634
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
AZL-98592 CVE-2019-9634 affecting package golang 1.27.1-1
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
CVE-2019-9634
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection...
CVE-2019-9634
CVE-2019-9634 targets Go on Windows, where improper use of LoadLibrary in Go 1.12 can enable DLL injection. The vulnerability arises from how the runtime loads DLLs, enabling potential arbitrary code execution if a malicious DLL is loaded. Several connected sources corroborate the Windows DLL-inj...
