DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 Iniezione DLL in Slack 4.33.73 - CVE-2023-38820 Scopritore: Idan Malihi Descrizione Un problema in Slack v.4.33.73 consente a un attaccante locale di eseguire codice arbitrario tramite il meccanismo di caricamento delle DLL nei file profapi.dll,...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 DLL Planting in Corsair iCUE v.5.3.102 CVE-2023-38822 Scopritore: Idan Malihi Descrizione Un problema in Corsair iCUE v.5.3.102 consente a un attaccante locale di eseguire codice arbitrario tramite i componenti MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll e...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting no CoD MW Warzone 2 - CVE-2023-38821 Descobridor: Idan Malihi Descrição Um problema no Activision Call of Duty Modern Warfare: Warzone v.2 permite que um invasor local execute código arbitrário através de um arquivo criado para os componentes...

CVE-2020-1337

CVE-2020-1337 - Piantagione Binaria bypass di CVE-2020-1048 Peleg Hadar @peleghd e Tomer Bar di SafeBreach @safebreach sono stati riconosciuti da Microsoft per il CVE-2020-1048, una vulnerabilità dello Spooler di Windows che consente un'elevazione dei privilegi su Windows 7 e successivi. Alcuni...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / COM Object DLL Planting Poc originale: https://www.exploit-db.com/exploits/38968/ Eseguire poc.rtf con mqrt.dll nella stessa directory attiverà la dll, che in questo caso pop calc anche fare Down/exec Dll funzionerà Esportare la dll per eseguirla da Samba/WebDav è...

CVE-2026-66804

CVE-2026-66804: EoP della fotocamera virtuale Cross Device Scoperto e segnalato in modo indipendente, il problema è ora tracciato come CVE-2026-66804. MSRC ha confermato che la segnalazione è un duplicato di un rapporto precedente con la stessa causa principale sottostante di Windows Camera...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Schwachstelle bezüglich Rechteausweitung im Microsoft Windows Cross Device Service Proof of Concept für eine CrossDevice/FrameServer-LPE, die ich an MSRC gemeldet habe und die CVE-2026-66804 erhalten hat. Sie betrifft Windows 10 und Windows 11. Schwachstelle Windows registriert...

CVE-2020-9442

Título do Exploit: OpenVPN Connect para Windows MSI - 3.1.0.361 - Escalação de Privilégio Data: 2020-02-28 Autor: Andrew Hess Link do Software: https://openvpn.net/client-connect-vpn-for-windows/ Versão: 3.1.0.361 MSI CVE: CVE-2020-9442 Histórico 2019.12.15 - Vulnerabilidade descoberta 2019.12.15...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Elevazione dei privilegi della fotocamera virtuale Cross Device Ho scoperto e segnalato in modo indipendente il problema ora tracciato come CVE-2026-66804. MSRC ha confermato la mia segnalazione come duplicato di un rapporto precedente con la stessa causa principale sottostante di...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

CVE-2025-13670

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13670 High Level Synthesis Compiler Security Advisory

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

Technical details about CVE-2025-13665 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

EUVD-2022-53467

Malicious code in bioql PyPI...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...

CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...