220 matches found
CVE-2024-0197-POC
CVE-2024-0197-POC Thales Sentinel HASP LDK 中本地权限提升的概念验证。 我最初想自己开发一个，但最终发现没有必要。 没有需要争取的竞争条件，从一个已知位置进行简单的 DLL 搜索顺序劫持即可获得 SYSTEM 权限。 我们只需： 1. 将 raw.cpp 编译为 fltlib.dll 并放入 AppData\Local\Temp（它必须是一个正确的代理 DLL，指向 C:\Windows\System32\fltlib.dll）。 2. 然后运行 msiexec.exe /fa PATHTOMSI。...
iscsicpl_bypassUAC
iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day El binario iscsicpl.exe es vulnerable a una vulnerabilidad de secuestro del orden de búsqueda de DLL cuando se ejecuta un binario de Microsoft de 32 bits en un host de 64 bits a través de SysWOW64. El binario de 32 bits realizará una...
DLL-Planting-Slack-4.33.73-CVE-2023-38820
DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting en Slack 4.33.73 - CVE-2023-38820 Descubridor: Idan Malihi Descripción Un problema en Slack v.4.33.73 permite a un atacante local ejecutar código arbitrario mediante el mecanismo de carga de DLL en los archivos profapi.dll, CRYPTBASE.dll,...
DLLHSC
DLLHSC DLL Hijack SCanner（DLL劫持扫描器）——一款用于生成线索并自动化发现DLL搜索顺序劫持候选目标的工具 本页目录 本仓库内容 运行模式 编译与运行指导 帮助菜单 示例运行 反馈 本仓库内容 本仓库包含该工具的Visual Studio项目文件（DLLHSC）、API钩子功能项目文件（detour）、有效载荷项目文件，以及最重要的——适用于x86和x64架构的编译后可执行文件（位于本仓库的release部分）。代码使用 Visual Studio Community 2019 编写和编译。...
CVE-2026-9633
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...
CVE-2026-9634
CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...
CVE-2026-9633
CVE-2026-9633 affects Rockwell Automation's Redundancy Module Configuration Tool . The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, but due to incorrect default permissions , one or more of these directories may be writable by standard (non-administrator) u...
CVE-2022-42945
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...
CVE-2021-31853
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption MDE prior to 7.3.0 HF2 7.3.0.183 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...
EUVD-2020-25870
Malware in sbrugna...
EUVD-2019-13281
Malware in sbrugna...
EUVD-2020-28439
Malware in sbrugna...
EUVD-2020-30456
Malware in sbrugna...
EUVD-2018-10623
Malware in sbrugna...
EUVD-2019-1847
Malware in sbrugna...
EUVD-2019-13302
Malware in sbrugna...
EUVD-2019-13248
Malware in sbrugna...
EUVD-2019-13222
Malware in sbrugna...