13064 matches found
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 23.1 that originates from a vulnerability that allows an attacker to hijack a...
PT-2023-11766 · Microsoft +1 · Cryptbase.Dll +1
Name of the Vulnerable Software and Affected Versions: BeyondTrust Privilege Management for Windows versions through 5.7 Description: The issue arises when a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%Temp. Recommendations: For versions through...
Acronis Cyber Protect Code Issue Vulnerability
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A code issue...
Douglas-042 - Powershell Script To Help Speed Up Threat Hunting Incident Response Processes
DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed to expedite the triage process and facilitate the meticulous collection of crucial evidence derived from both forensic artifacts and the ephemeral landscape of volatile data. Its fundamental mission revolve...
New PoolParty Process Injection Techniques Outsmart Top EDR Solutions
A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response EDR systems. SafeBreach researcher Alon Leviev said the methods are "capable of working across all...
CVE-2023-6061
Rejected reason: This CVE ID has been rejected/withdrawn by its CVE Numbering Authority Palo Alto Networks based on discussions with Mitsubishi Electronics Corporation's PSIRT...
Design/Logic Flaw
Multiple components of Iconics SCADA Suite are prone to a Phantom DLL loading vulnerability. This issue arises from the applications improperly searching for and loading dynamic link libraries, potentially allowing an attacker to execute malicious code via a DLL with a matching name in an...
CVE-2023-6061
CVE-2023-6061 is rejected/withdrawn by the CVE Numbering Authority; not an active vulnerability.
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
Spoofing
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
TTplayer Security Breach
TTplayer 千千静听 is a free audio media player from China's TTplayer company that supports multiple audio formats. A security vulnerability exists in TTplayer version 7.0.2, which originates from a DLL hijacking vulnerability. The vulnerability can be exploited by an attacker to elevate privileges vi...
CVE-2023-48861
CVE-2023-48861 affects TTplayer (TTplayer 7.0.2). The vulnerability is a DLL hijacking issue in urlmon.dll that allows local attackers to escalate privileges and execute arbitrary code. The available sources consistently describe the core impact but do not provide a confirmed patch. PT-2023-30990...
PT-2023-30990 · Microsoft · Urlmon.Dll
Name of the Vulnerable Software and Affected Versions: TTplayer version 7.0.2 Description: The issue allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. This is a result of a DLL hijacking vulnerability. Recommendations: For TTplayer version 7.0.2, consider...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
CVE-2023-41613
EzViz Studio v2.2.0 is vulnerable to DLL hijacking...