Siemens Software Center

SUMMARY The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the...

CVE-2026-62847

Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory "Path.GetTempPath", i.e. "/tmp", and...

Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

GHSA-M6WQ-39M7-9XPP Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

Siemens Software Center: Permissions, licensing, and access control issues

The Siemens Software Center has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the loading of dynamic link libraries DLLs from uncontrolled search paths. This could allow authenticated local attackers to place malicious DLLs in the application’...

Linux Distros Unpatched Vulnerability : CVE-2026-107615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary...

CVE-2026-68836

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-68836

A heap-based buffer overflow exists in Windows kernel32.dll , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core Windows operating system. Documentation indicates that an official fix is available, but specific patch version...

EUVD-2026-99269

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

PT-2026-112048

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

Microsoft Windows: CVE-2026-68836: Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-68836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

xworm-7.4-RCE-PoC

XWorm C2 Controller - 0-Day Remote Code Execution RCE !Au...

firefox: thunderbird: Privilege escalation in the DLL Services component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DLL Services component...

firefox: thunderbird: Privilege escalation in the DLL Services component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DLL Services component...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...

exe_to_dll

EXEtoDLL Convierte un EXE para que pueda cargarse como una DLL. Compatible con DLLs de 32 y 64 bits Inspirado por la idea de@guywhataguy. Lea más aquí. Descarga Las compilaciones estables están disponibles en releases. Las compilaciones de prueba se pueden descargar desde el servidor de...