CVE-2023-1487 Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service

A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 ...

PT-2023-17024 · Lespeed Wisecleaner · Wise System Monitor

Name of the Vulnerable Software and Affected Versions: Lespeed WiseCleaner Wise System Monitor version 1.5.3.54 Description: A problematic issue has been found in the library WiseHDInfo64.dll of the component IoControlCode Handler, affecting some unknown processing. The manipulation leads to deni...

PT-2023-17025 · Lespeed Wisecleaner · Wise System Monitor

Name of the Vulnerable Software and Affected Versions: Lespeed WiseCleaner Wise System Monitor version 1.5.3.54 Description: A problematic issue was found in the library WiseHDInfo64.dll of the component IoControlCode Handler, affecting an unknown function. The manipulation leads to denial of...

Chinese and Russian Hackers Using SILKLOADER Malware to Evade Detection

Threat activity clusters affiliated with the Chinese and Russian cybercriminal ecosystems have been observed using a new piece of malware that's designed to load Cobalt Strike onto infected machines. Dubbed SILKLOADER by Finnish cybersecurity company WithSecure, the malware leverages DLL...

CVE-2021-31637

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL...

CVE-2021-31637

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL...

Design/Logic Flaw

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL...

CVE-2021-31637

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL...

CVE-2021-31637

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL...

CVE-2021-31637

The CVE-2021-31637 issue affects UwAmp versions 1.1 through 3.0.2. A crafted DLL can allow a remote attacker to execute arbitrary code. Connected sources corroborate the affected range and the remote-code-execution impact. A fix is not specified in the provided documents; remediation guidance sta...

Creative Cloud Desktop Application RCE Vulnerability (APSB23-21) - Windows

Adobe Creative Cloud is prone to a high-risk vulnerability that can lead to remote code execution SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Security Updates for Microsoft Visual Studio Products (March 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its...

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

Code injection

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

KamiKakaBot Malware Used in Latest Dark Pink APT Attacks on Southeast Asian Targets

The Dark Pink advanced persistent threat APT actor has been linked to a fresh set of attacks targeting government and military entities in Southeast Asian countries with a malware called KamiKakaBot. Dark Pink, also called Saaiwc, was extensively profiled by Group-IB earlier this year, describing...

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

CVE-2023-24578

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...

McAfee Total Protection 代码问题漏洞

McAfee Total Protection MTP is a suite of antivirus software from the US-based McAfee, Inc. A security vulnerability exists in McAfee Total Protection prior to version 16.0.49, which originated from a vulnerability that allows an attacker to elevate a user's privileges via DLL side loading. The...

CVE-2023-24578

CVE-2023-24578 affects McAfee Total Protection prior to 16.0.49. The root cause is DLL sideloading in the product, allowing a local, low-privilege user to elevate privileges and perform unauthorized tasks. Affected software is McAfee Total Protection; the issue is tied to DLL search path handling...

The vulnerability of the APDFL.dl library, a tool for 3D JT/JT2Go viewing and Teamcenter Visualization lifecycle management system, allows a perpetrator to execute arbitrary code.

The vulnerability of the APDFL.dll library, which is used by 3D JT, JT2Go, and Teamcenter Visualization lifecycle management systems, relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...