CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

CVE-2023-25005

CVE-2023-25005 affects Autodesk InfraWorks 2021–2023. A malicious DLL can cause reads beyond allocated boundaries when parsing DLLs, leading to a resource injection issue. Some sources describe use-after-free pathways that may enable code execution. Remediation is provided by Autodesk via securit...

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

CVE-2023-25428

Soft-o Free Password Manager 1.1.20 is affected by a DLL hijacking flaw (PMHook.dll) that can lead to arbitrary code execution when a malicious DLL is loaded from the system directory. Details cited across CVE-2023-25428 entries (NVD/Red Hat/EUVD/PRION/CVE records) describe the vulnerability as a...

Uncovering the Latest Tactics of the SideWinder APT

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary SideWinder APT group uses advanced tactics like spear-phishing, DLL side-loading & more. A new server-side polymorphism technique, highlighting the need for multi-layered security measures. To receive...

Soft-o Free Password Manager 代码问题漏洞

Soft-o Free Password Manager is a password manager from Soft-o. A security vulnerability exists in Soft-o Free Password Manager version 1.1.20. An attacker could exploit this vulnerability to conduct a DLL hijacking attack...

Soft-o Free Password Manager 1.1.20 DLL Hijacking

Title: Soft-o Free Password Manager 1.1.20 DLL hijacking Credit: Christian Bortone CVE: CVE-2023-25428 Date: 08/05/2023 dd/mm/yyyy Details: PMHook.dll is vulnerable to DLL hijacking attacks. An attacker can launch a DLL hijacking attack by placing a malicious DLL named PMHook.dll in the target...

Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique

The advanced persistent threat APT actor known as SideWinder has been accused of deploying a backdoor in attacks directed against Pakistan government organizations as part of a campaign that commenced in late November 2022. "In this campaign, the SideWinder advanced persistent threat APT group us...

Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique

The advanced persistent threat APT actor known as SideWinder has been accused of deploying a backdoor in attacks directed against Pakistan government organizations as part of a campaign that commenced in late November 2022. "In this campaign, the SideWinder advanced persistent threat APT group us...

Dragon Breath APT Evolves with Double DLL Sideloading

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Dragon Breath APT targets the gambling industry using the double-clean-app technique & DLL sideloading. Chinese-speaking Windows users are being targeted. To receive real-time threat advisories, please...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

Design/Logic Flaw

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

PT-2023-2696 · Microsoft · Remote Desktop Client +2

Name of the Vulnerable Software and Affected Versions: Windows 10 version 22H2 Description: The issue exists due to insufficient input validation in the Remote Desktop Client of the Windows operating system. This allows an attacker to execute arbitrary code, potentially impacting the system. The...

CVE-2023-30237

CVE-2023-30237 affects CyberGhostVPN Windows Client releases before 8.3.10.10015. The vendor component Dashboard.exe is implicated in a DLL injection/elevation-of-privilege scenario via a privileged Windows service communication channel (named pipe MachineNameCyberGhost8Service). Public details d...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CyberGhostVPN 代码问题漏洞

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN Windows Client versions prior to v8.3.10.10015, which was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat APT actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. "The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an...

PT-2023-22597 · Cyberghost · Cyberghostvpn Windows Client

Name of the Vulnerable Software and Affected Versions: CyberGhostVPN Windows Client versions prior to 8.3.10.10015 Description: A DLL injection issue was found in the Dashboard.exe component of the CyberGhostVPN Windows Client. Recommendations: For versions prior to 8.3.10.10015, update to versio...

Metasploit Weekly Wrap-Up

Throw another log file on the fire Our own Stephen Fewer authored a module targeting CVE-2023-26360 affecting ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier. The vulnerability allows multiple paths to code execution, but our module works by leveraging a...