CVE-2021-3675

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on...

PT-2022-3401 · Synaptics · Synaptics Fingerprint Driver

Name of the Vulnerable Software and Affected Versions: Synaptics Fingerprint Driver versions 5.1.xxx.26 prior to xxx=340 on x86/64 Synaptics Fingerprint Driver versions 5.2.xxxx.26 prior to xxxx=3541 on x86/64 Synaptics Fingerprint Driver versions 5.2.2xx.26 prior to xx=29 on x86/64 Synaptics...

Samsung Kies KiesWrapper DLL Hijacking Vulnerability

Samsung Kies is an application from the South Korean company Samsung Samsung for data synchronization between devices. The program is mainly used to connect Samsung devices with computers and supports features such as file management and device updates. A DLL hijacking vulnerability exists in...

SharpEventPersist - Persistence By Writing/Reading Shellcode From Event Log

Persistence by writing/reading shellcode from Event Log. Usage The SharpEventPersist tool takes 4 case-sensitive parameters: -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management Service". The shellcode is converted to hex and written to the "Key Manageme...

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

Design/Logic Flaw

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

CVE-2022-24077

CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...

Fortinet FortiClient 6.0.x / 6.2.x / 6.4.x < 6.4.7 / 7.x < 7.0.1 Privilege Escalation (FG-IR-21-088)

The version of Fortinet FortiClient running on the remote host is affected by a privilege escalation vulnerability. An unsafe search path vulnerability in FortiClien Windows 7.0.0, 6.4.6 and below, 6.2.x, and 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a...

A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia

A previously undocumented Chinese-speaking advanced persistent threat APT actor dubbed Aoqin Dragon has been linked to a string of espionage-oriented attacks aimed at government, education, and telecom entities chiefly in Southeast Asia and Australia dating as far back as 2013. "Aoqin Dragon seek...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

Code injection

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

CVE-2022-30744

CVE-2022-30744 is a DLL hijacking vulnerability in KiesWrapper of Samsung Kies prior to 2.6.4.22043_1. The issue allows a local attacker to execute arbitrary code by loading a DLL without an absolute path, with impact described as arbitrary code execution and requiring local access. Affected comp...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

CVE-2022-32291

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname for a DLL file in a RAM file...

CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...

CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...

Directory traversal

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...

CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...