CVE-2024-36507

A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering...

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

CVE-2024-47942

Solid Edge SE2024 is vulnerable to a DLL hijacking issue in all versions prior to V224.0 Update 9. The root cause is an uncontrolled DLL search path that enables an attacker to execute arbitrary code by placing a crafted DLL on the system. Multiple sources (NVD/Red Hat advisories) confirm the vul...

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 9. The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

PT-2024-27039 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientWindows versions 7.0.0 through 7.0.12 Fortinet FortiClientWindows versions 7.2.0 through 7.2.4 Fortinet FortiClientWindows version 7.4.0 Description: The issue is related to an untrusted search path in Fortinet...

Fortinet FortiClient Online Installer DLL Hijacking (FG-IR-24-205)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-205 advisory. - A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12...

Siemens Solid Edge

SUMMARY Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or PSM format, and by a DLL hijacking vulnerability. This could allow an attacker to crash the application or execute...

The vulnerabilities of the ODXSW_DLL.dll and libodxdll.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allow attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service interruptions.

The vulnerability of the ODXSWDLL.dll and libodxdll.dll libraries, which are used in AutoCAD modeling, design, and drafting software, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Veritas NetBackup Privilege Escalation (VTS24-012)

The version of Veritas NetBackup installed on the remote host is 10.0, 10.0.0.1, 10.1, 10.1.1, 10.2, 10.2.0.1, 10.3, 10.3.0.1, 10.4, or 10.4.0.1. It is, therefore, affected by a vulnerability as referenced in the VTS24-012 advisory. - Veritas NetBackup primary server, media server, and clients...

SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

An ongoing phishing campaign is employing copyright infringement-related themes to trick victims into downloading a newer version of the Rhadamanthys information stealer since July 2024. Cybersecurity firm Check Point is tracking the large-scale campaign under the name CopyRhightadamantys. Target...

Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

Cybersecurity researchers are warning that a command-and-control C&C framework called Winos is being distributed within gaming-related applications like installation tools, speed boosters, and optimization utilities. "Winos 4.0 is an advanced malicious framework that offers comprehensive...

A vulnerability exists in the acdb25.dll file of the AutoCAD simulation, design, and drafting software, which allows a perpetrator to execute arbitrary code.

The vulnerability in the acdb25.dll file of the AutoCAD modeling, design, and drawing software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process while...

The vulnerability of the acdb25.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the acdb25.dll library in AutoCAD simulation, design, and drawing software relates to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary code, or cause a service failu...

The vulnerability of the odxsw_dll.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the odxswdll.dll software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary...

Exploit for Untrusted Search Path in Yandex Yandex_Browser

CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7...

The vulnerability of the BaseBindToMachine() function in the advapi32.dll library of the WinReg client on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the BaseBindToMachine function in the advapi32.dll library of the WinReg client on Windows operating systems is related to the transfer of NTLM authentication data to the Active Directory Certificate Services ADCS service due to the use of outdated transport protocols...

CVE-2024-9996

A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-9997

A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...