DLLHSC

DLLHSC DLL Hijack SCanner - DLL 검색 순서 하이재킹 후보를 자동으로 발견하고 리드를 생성하는 도구 이 페이지의 목차 이 저장소의 내용 작동 모드 컴파일 및 실행 가이드 도움말 메뉴 실행 예시 피드백 이 저장소의 내용 이 저장소에는 도구DLLHSC의 Visual Studio 프로젝트 파일, API 후킹 기능detour의 프로젝트 파일, 페이로드의 프로젝트 파일, 그리고 x86 및 x64 아키텍처용으로 컴파일된 실행 파일이 저장소의 릴리스 섹션에 있음이 포함되어 있습니다. 코드는 Visual Studio...

iscsicpl_bypassUAC

iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day iscsicpl.exe バイナリには、SysWOW64 を介して 64bit ホスト上で 32bit の Microsoft バイナリを実行する際に、DLL 検索順序ハイジャックの脆弱性があります。32bit バイナリは、ユーザーの %Path% 内で iscsiexe.dll という DLL を検索します。これは、autoelevate が有効になっているため、Proxy DLL...

CVE-2024-0197-POC

CVE-2024-0197-POC Thales Sentinel HASP LDK의 로컬 권한 상승에 대한 개념 증명. 처음에는 하나를 개발하려고 했지만, 결국 불필요한 것으로 판명되었습니다. 극복해야 할 경쟁 조건race condition은 없으며, 알려진 위치에서 간단한 DLL 검색 순서 하이재킹만으로 SYSTEM 권한을 획득할 수 있습니다. 간단히: 1. raw.cpp를 fltlib.dll로 컴파일하여 AppData\Local\Temp에 넣습니다 C:\Windows\System32\fltlib.dll로 이어지는 적절한 프록시...

CVE-2026-107615

GlavSoft TightVNC Server for Windows versions prior to 2.8.88 is vulnerable to a DLL search order hijacking vulnerability. The DynamicLibrary::init() and ThemeLib components use LoadLibrary() to load screenhooks32.dll or screenhooks64.dll using a bare file name without specifying LOAD_LIBRARY_SEA...

DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 Slack 4.33.73의 DLL Planting - CVE-2023-38820 발견자: Idan Malihi 설명 Slack Slack v.4.33.73의 문제로 인해 로컬 공격자가 profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll, MSASN1.dll, mf.dll, mfplat.dll 및 RTWorkQ.DLL 파일의 DLL 로딩 메커니즘을 통해 임의 코드를 실행할 수 있습니다. 재현 단계 취약점을 악용하려면...

CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...

CVE-2026-9634

CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...

CVE-2026-9633

CVE-2026-9633 affects Rockwell Automation's Redundancy Module Configuration Tool . The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, but due to incorrect default permissions , one or more of these directories may be writable by standard (non-administrator) u...

CVE-2026-9169: Uncontrolled Search Path Element

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

PT-2026-68888

Name of the Vulnerable Software and Affected Versions LUCID Vision Labs Arena SDK version 1.0.80.49 Description DLL Search Order Hijacking on Windows allows a local attacker to execute arbitrary code with the privileges of the application. This occurs when the SDK traverses directories listed in...

CVE-2026-38972: Uncontrolled Search Path Element

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...

CVE-2026-22561: Uncontrolled Search Path Element

Uncontrolled search path elements in Anthropic Claude for Windows installer Claude Setup.exe versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs e.g., profapi.dll from its own directory after UAC elevation, enabling arbitrary code...

CVE-2026-4255: Inclusion of Functionality from Untrusted Control Sphere

A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows 64-bit allows a local attacker to escalate privileges via DLL side-loading. The application loads certain dynamic-link library DLL dependencies using the default Windows search order, which includes directories...

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

CVE-2021-31853

DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption MDE prior to 7.3.0 HF2 7.3.0.183 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...

CVE-2023-53937: Uncontrolled Search Path Element

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

CVE-2025-34417: Uncontrolled Search Path Element

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

EUVD-2020-30456

Malware in sbrugna...

EUVD-2020-28439

Malware in sbrugna...

EUVD-2019-13281

Malware in sbrugna...