CVE-2020-9442

漏洞标题: OpenVPN Connect for Windows MSI - 3.1.0.361 - 权限提升 日期: 2020-02-28 作者: Andrew Hess 软件链接: https://openvpn.net/client-connect-vpn-for-windows/ 版本: 3.1.0.361 MSI CVE: CVE-2020-9442 历史 2019.12.15 - 发现漏洞 2019.12.15 - 首次联系供应商 2020.01.xx - 供应商补丁 - 3.1.1 378 beta 3.1.1 378 beta 版本发布说明...

Corsair---DLL-Planting-CVE-2023-38822

Corsair —— DLL 种植漏洞 CVE-2023-38822 Corsair iCUE v.5.3.102 中的 DLL 种植漏洞（CVE-2023-38822） 发现者：Idan Malihi 描述 Corsair iCUE v.5.3.102 中的一个问题允许本地攻击者通过 MPDC.dll、CRYPTSP.dll、dcomp.dll、profapi.dll 和 MSASN1.dll 组件执行任意代码。 复现步骤 要利用 DLL 种植漏洞，攻击者应执行以下步骤： 1. 下载 iCUE 的最新版本。 2. 安装 iCUE 产品。 3. 打开安装路径文件夹，例如 C:\Progr...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 使命召唤现代战争战区2中的DLL种植漏洞 - CVE-2023-38821 发现者: Idan Malihi 描述 动视《使命召唤：现代战争》战区v2中存在一个问题，允许本地攻击者通过精心构造的文件对UMPDC.dll、MSIMG32.dll、RTWorkQ.DLL、WINSTA.dll、CRYPTSP.dll、dnsapi.dll、MSASN1.dll、webio.dll、fwbase.dll、ncrypt.dll和DPAPI.DLL组件执行任意代码。 复现步骤 要利用该DLL种植漏洞，攻击者应执行以下步骤： 1...

CVE-2020-1337

CVE-2020-1337 - 二进制植入（CVE-2020-1048 绕过） SafeBreach 的 Peleg Hadar @peleghd 和 Tomer Bar 因 CVE-2020-1048 而受到 Microsoft 致谢，该漏洞是 Windows 打印后台处理程序漏洞，可在 Windows 7 及更高版本上实现权限提升。 Alex Ionescu @aionescu 和 Yarden Shafir @yardenshafir 在其精彩的博客文章 PrintDemon: Print Spooler Privilege Escalation, Persistence &...

DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting in the Slack 4.33.73 - CVE-2023-38820 Discoverer: Idan Malihi Description An issue in Slack Slack v.4.33.73 allows a local attacker to execute arbitrary code via the DLL loading mechanism in profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll,...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Elevación de Privilegios de la Cámara Virtual Cross Device Descubrí y reporté de forma independiente el problema que ahora se sigue como CVE-2026-66804. MSRC confirmó que mi envío era un duplicado de un informe anterior con la misma causa raíz subyacente de Windows Camera...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Vulnerabilidad de elevación de privilegios en el Servicio Cross Device de Microsoft Windows Prueba de concepto de un LPE en CrossDevice/FrameServer que informé a MSRC y que recibió CVE-2026-66804. Afecta a Windows 10 y Windows 11. Vulnerabilidad Windows registra este servidor COM...

CVE-2026-66804

CVE-2026-66804: Elevación de Privilegios EoP en la Cámara Virtual Cross Device El problema, descubierto e informado de forma independiente, ahora se rastrea como CVE-2026-66804. MSRC confirmó el envío como duplicado de un informe anterior con la misma causa raíz subyacente en Windows Camera...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

CVE-2025-13670

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13670 High Level Synthesis Compiler Security Advisory

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

Technical details about CVE-2025-13665 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2025-13665: Uncontrolled Search Path Element

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13670: Uncontrolled Search Path Element

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

EUVD-2022-53467

Malicious code in bioql PyPI...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...