PT-2018-11043

Name of the Vulnerable Software and Affected Versions Intel IoT Developers Kit version 4.0 Description A DLL injection issue in the installer may allow an authenticated user to potentially escalate privileges using file modification via local access. Recommendations For Intel IoT Developers Kit...

PT-2018-11040

Name of the Vulnerable Software and Affected Versions Intel Data Center Migration Center Software versions 3.1 and earlier Description A DLL injection issue in the software installer may allow an authenticated user to potentially execute code using default directory permissions via local access...

CVE-2018-12160: Incorrect Default Permissions

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...

Intel® Data Migration Software Improper Permissions Advisory

Summary: A potential security vulnerability in Intel® Data Migration Software may allow Escalation of Privilege. Intel is releasing Intel® Data Migration Software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-12160 Description: DLL injection vulnerability...

INTEL-SA-00086 Detection Tool DLL Injection Issue Advisory

Summary: A potential security vulnerability in the INTEL-SA-00086 Detection Tool may allow a privileged user to execute arbitrary code. Intel is releasing INTEL-SA-00086 Detection Tool updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3686 Description: Code...

Intel® IoT Developers Kit Permissions Advisory

Summary: A potential security vulnerability in Intel® IoT Developers Kit may allow escalation of privilege. Intel is releasing IoT Developers Kit updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12163 Description: A DLL injection vulnerability in the Intel...

Mail.ru: ICQ 10.0.12371 icq: Uri Handler '-testability' URL File Insecure Library Loading Code Execution Vulnerability

An exploitation of combination of unsafe URI handler and insecure DLL loading could result in code execution via DLL injection in ICQ desktop application for Windows if user executes malformed .url file...

HPSBHF03591 rev. 1 - Intel Wireless Driver DLL Injection Vulnerability

Potential Security Impact Escalation of privilege Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY HP has been notified of a security vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related...

PowerSploit

This is an offensive tool for Windows PowerShell exploitation. It is a collection of PowerShell scripts that can be used to exploit vulnerabilities in Windows systems. The repository contains several modules, including AntivirusBypass, CodeExecution, and others. The AntivirusBypass module contain...

sRDI - Shellcode Implementation Of Reflective DLL Injection

sRDI allows for the conversion of DLL files to position independent shellcode. Functionality is accomplished via two components: C project which compiles a PE loader implementation RDI to shellcode Conversion code which attaches the DLL, RDI, and user data together with a bootstrap This project i...

Design/Logic Flaw

DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code...

CVE-2018-3649

DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code...

CVE-2018-3649

DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code...

CVE-2018-3649

CVE-2018-3649 affects Intel Dual Band/Tri-Band Wireless-AC and Wireless-AC families. The vulnerability is a DLL injection in installation executables (Autorun.exe, Setup.exe) that could allow a local attacker to escalate privileges via remote code execution. Trusted by multiple sources (Intel adv...

PT-2018-16110

Name of the Vulnerable Software and Affected Versions Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products affected versions not specified Description A DLL injection issue exists in the installation executables, specifically Autorun.exe and Setup.exe, for Intel's...

CVE-2018-3649: Uncontrolled Search Path Element

DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code...

Elevation of Privilege vulnerability when installing Intel Wireless Drivers and related Software

Summary: Intel is releasing software updates that mitigate a security vulnerability in executables to install Intel Wireless drivers. Description: DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software allows a local...

Microsoft Windows POP/MOV SS Local Privilege Elevation Vulnerability

This module exploits a vulnerability in a statement in the system programming guide of the Intel 64 and IA-32 architectures software developer's manual being mishandled in various operating system kerneles, resulting in unexpected behavior for DB excpetions that are deferred by MOV SS or POP SS...

Windows WMI Recieve Notification Exploit

This Metasploit module exploits an uninitialized stack variable in the WMI subsystem of ntoskrnl. This Metasploit module has been tested on vulnerable builds of Windows 7 SP0 x64 and Windows 7 SP1 x64. This module requires Metasploit: http://metasploit.com/download Current source:...

Reflective DLL Injection, Windows x86 Bind Named Pipe Stager

Inject a DLL via a reflective loader. Listen for a pipe connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 349 include Msf::Payload::Stager include...