13051 matches found
Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer
New Lone None Stealer uses Telegram C2 and DLL side-loading to grab passwords, credit cards, and crypto. Find out how to spot this highly evasive phishing scam...
How RainyDay, Turian and a new PlugX variant abuse DLL search order hijacking
Cisco Talos discovered a new campaign active since 2022, targeting the telecommunications and manufacturing sectors in Central and South Asian countries, delivering a new variant of PlugX. Talos discovered that the new variant's features overlap with both the RainyDay and Turian backdoors,...
CVE-2025-10491
The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 a...
CVE-2025-57624
A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs...
PT-2025-38067
Name of the Vulnerable Software and Affected Versions: CYRISMA Agent versions prior to 444 Description: A DLL hijacking vulnerability allows local users to escalate privileges and execute arbitrary code via multiple DLLs. Recommendations: Update CYRISMA Agent to version 444 or later...
CVE-2025-57624
CVE-2025-57624 is a DLL hijacking vulnerability in CYRISMA Agent prior to version 444 that enables local privilege escalation and arbitrary code execution via multiple DLLs. The CVSS vector indicates a LOCAL attack with LOW attack complexity, requiring LOW privileges and no user interaction, with...
CVE-2025-10491
The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 a...
CVE-2025-10491
The CVE-2025-10491 issue concerns MongoDB Server on Windows where the MSI installer may leave ACLs unset on custom installation directories, enabling a local attacker to insert a malicious DLL and hijack the MongoDB process. Affected versions are MongoDB Server 6.0 prior to 6.0.25, 7.0 prior to 7...
MongoDB Server 安全漏洞
MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server v6.0 versions prior to 6.0.25, v7.0 versions...
PT-2025-37717
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.21 MongoDB Server versions prior to 8.0.5 Description: The MongoDB Windows installation MSI may leave Access Control Lists ACLs unset on custom installation...
ProcessInjection
It is an offensive tool for Windows. This repository contains proof-of-concept PoC code for injecting a DLL into a running process on Windows. The primary CVE ID is not explicitly stated, but the code appears to target a vulnerability in the Windows operating system. The target product/service is...
CVE-2025-9201
A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
CVE-2025-10213
DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\AppData\Local\Microsoft\WindowsApps' directory, which could lead to arbitrary...
CVE-2025-40979
DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users\AppData\Local\Temp' directory, which could lead to...
CVE-2025-9201
A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...
CVE-2025-9201
CVE-2025-9201 corresponds to a DLL hijacking vulnerability in Lenovo Browser that could allow a local user to execute code with elevated privileges. Connected sources explicitly reference Lenovo Browser and describe the issue as a local privilege escalation via DLL hijacking, but they do not prov...
CVE-2025-9201
A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...
