CVE-2025-57777

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. Th...

Russian APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries

The Russian state-sponsored hacking group tracked as APT28 has been attributed to a new Microsoft Outlook backdoor called NotDoor in attacks targeting multiple companies from different sectors in NATO member countries. NotDoor "is a VBA macro for Outlook designed to monitor incoming emails for a...

CVE-2025-57777

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. Th...

CVE-2025-57777

CVE-2025-57777 is a vulnerability in Digilent DASYLab caused by an out-of-bounds write in displ2.dll while parsing DSB files. The flaw can lead to arbitrary code execution and requires a user to open a specially crafted DSB file. Multiple connected sources (ZDI-25-890, NVD/NVD citation, RH) confi...

CVE-2025-57777 Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. Th...

PT-2025-35602

Name of the Vulnerable Software and Affected Versions Digilent DASYLab affected versions not specified Description An out-of-bounds write issue exists due to improper bounds checking in displ2.dll when parsing a DSB file. This can lead to arbitrary code execution if a user opens a specially craft...

Digilent DASYLab 安全漏洞

Digilent DASYLab is a graphical data acquisition application development platform from Digilent. A security vulnerability exists in Digilent DASYLab that stems from improper boundary checking when parsing DSB files by displ2.dll, which could lead to the execution of arbitrary code...

CVE-2025-58322

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks...

Linux Distros Unpatched Vulnerability : CVE-2011-3012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions...

CVE-2025-52095

An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll...

MAL-2025-18479 Malicious code in discord.dll (npm)

The package discord.dll was found to contain malicious code...

Malicious code in phone-scrape-dll (npm)

The package phone-scrape-dll was found to contain malicious code...

MAL-2025-29157 Malicious code in phone-scrape-dll (npm)

The package phone-scrape-dll was found to contain malicious code...

CVE-2025-30033

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component...

Siemens Web Installer

SUMMARY The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only...

Siemens多款产品 代码问题漏洞

Siemens Automation License Manager is a license manager for Siemens products from Siemens Germany. A code issue vulnerability exists in various Siemens products that stems from susceptibility to DLL hijacking attacks, which could lead to the execution of arbitrary code...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...

CVE-2013-10046

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...