CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8589

A maliciously crafted SLDPRT file when parsed in odxswdll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8588

A maliciously crafted SLDPRT file when parsed in odxswdll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-9996 Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Code Execution Vulnerability

A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-50583

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings...

CVE-2024-50583

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings...

CVE-2024-50583

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings...

CVE-2024-50583

CVE-2024-50583 affects Whale browser Installer prior to v3.1.0.0. Root cause: improper permission settings allow an attacker to cause execution of a malicious DLL in the user environment. Impact is limited to the installer component; explicit exploitation details are not provided in the sources. ...

CVE-2024-47881

OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the database extension, the "enableloadextension" property can be set for the SQLite integration, enabling an attacker to load local or remote extension DLLs and so run...

CVE-2024-48605

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file...

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus, which are both malware loaders, are designed to steal personal data, along with downloading and...

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

The prolific Chinese nation-state actor known as APT41 aka Brass Typhoon, Earth Baku, Wicked Panda, or Winnti has been attributed to a sophisticated cyber attack targeting the gambling and gaming industry. "Over a period of at least six months, the attackers stealthily gathered valuable informati...

PT-2024-23719 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView 32bit version 4.66 Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via a crafted file, affecting the IrfanView 32bit component with the plugin formats.dll. Recommendations: For IrfanView 32b...

Adobe Creative Cloud < 4.8.0.410 Privilege Escalation (APSB19-11)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.8.0.410. It is, therefore, affected by a vulnerability as referenced in the APSB19-11 advisory. - Creative Cloud Desktop Application installer versions 4.7.0.400 and earlier have an insecure library loading dll...

CVE-2024-31007

CVE-2024-31007 affects IrfanView 32bit v4.66, specifically the formats.dll plugin. The vulnerability is a buffer overflow in the 32-bit IrfanView component that can be triggered by a crafted file, allowing a local attacker to cause a denial of service. Exploitation is local and requires user inte...

Adobe Creative Cloud < 4.5.5.342 Privilege Escalation (APSB18-20)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.5.5.342. It is, therefore, affected by a vulnerability as referenced in the APSB18-20 advisory. - Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijackin...

Adobe Character Animator 2.0.0 < 2.1.1 Arbitrary code execution (APSB19-32)

The version of Adobe Character Animator installed on the remote Windows host is prior to 2.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-32 advisory. - Adobe Character Animator versions 2.1 and earlier have an insecure library loading dll hijacking vulnerability...

Adobe Premiere Pro < 13.1.3 Arbitrary code execution (APSB19-33)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 13.1.3. It is, therefore, affected by a vulnerability as referenced in the APSB19-33 advisory. - Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading dll hijacking vulnerability...

Error: Failed to verify [C:\windows\Veeam\Backup\Upload\VeeamDeploymentDll.dll] signature.

Challenge When Veeam Backup & Replication is attempting to install Veeam Agent for Microsoft Windows backup agents on a machine the procedure fails with: Unable to install backup agent: failed to connect to Error: Failed to verify C:\windows\Veeam\Backup\Upload\VeeamDeploymentDll.dll signature...

CVE-2024-10068

A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an unknown function in the library libcrypto-11.dll of the file FlashFXP.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploi...