13073 matches found
Skype Windows desktop version suffers from dll hijacking vulnerability
Skype Desktop is a free voice communication program. Skype Desktop for Windows has a dll hijacking vulnerability that can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...
WinAVR Version 20100110 - Insecure Folder Permissions Vulnerability
Exploit Title: WinAVR Version 20100110 - Insecure Folder Permissions Exploit Author: Mohammed Alshehri Vendor Homepage: https://sourceforge.net/projects/winavr/ Software Link: https://sourceforge.net/projects/winavr/files/WinAVR/20100110/WinAVR-20100110-install.exe Version: Version 20100110 Teste...
Shenzhen DiYuan Technology Co., Ltd D Shield_Firewall has dll hijacking vulnerability
D ShieldFirewall is an active defense protection software designed for IIS. Ltd. D ShieldFirewall has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...
NTLM BITS SYSTEM Token Impersonation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'SYSTEM token impersonation through NTLM bits authentication on missing WinRM Service.',...
Lovecraft client suffers from dll hijacking vulnerability
Aiki is an online video site. A dll hijacking vulnerability exists in the AikiYi client, which can be exploited by an attacker to gain control of the server...
QuickTimePlayer suffers from dll hijacking vulnerability
QuickTimePlayers is a player released by Apple developed for macOS and Windows. A dll hijacking vulnerability exists in QuickTimePlayer, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...
PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation
Exploit Title: PaperStream IP TWAIN 1.42.0.5685 - Local Privilege Escalation Exploit Author: 1F98D Original Author: securifera Date: 12 May 2020 Vendor Hompage: https://www.fujitsu.com/global/support/products/computing/peripheral/scanners/fi/software/fi6x30-fi6x40-ps-ip-twain32.html CVE:...
PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation
Exploit Title: PaperStream IP TWAIN 1.42.0.5685 - Local Privilege Escalation Exploit Author: 1F98D Original Author: securifera Vendor Hompage: https://www.fujitsu.com/global/support/products/computing/peripheral/scanners/fi/software/fi6x30-fi6x40-ps-ip-twain32.html CVE: CVE-2018-16156 Tested on:...
Acronis: Local privilege escalation via insecure MSI file
Summary I've found a vulnerability which leads to a local privilege escalation starting from a non-admin user. When True Image client installs it drops 2 MSI files into C:\Windows\Installer folder. Since this folder by default is readable by anyone, a non-admin user can execute commands like...
XMind for Windows suffers from dll hijacking vulnerability
XMind is a mind mapping software that is also open source and cross-platform. XMind for Windows suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Tencent Classroom PC standalone client suffers from dll hijacking vulnerability
Tencent Classroom PC standalone client is an online course learning client. A dll hijacking vulnerability exists in Tencent Classroom PC standalone client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Curtain (Windows client) has a dll hijacking vulnerability
Curtain is a mind mapping software for computers. A dll hijacking vulnerability exists in Curtain Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Kyodo Reader for Windows suffers from a dll hijacking vulnerability
Jingdong Book is an e-book reading software. A dll hijacking vulnerability exists in Jingdong Book for Windows. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
Technical Deep Dive Into SolarWinds Breach
Many organizations have been compromised by the recent SolarWinds breach, which seems to be a targeted attack against both government and private agencies. The complete scale of this attack is still unknown, but what is known is that the hackers gained access to victims’ systems via malicious...
Fantastic PPT to Long Chart Software windows version has dll hijacking vulnerability
Magic PPT to Long Picture Software is a software to convert PPT files to long strip pictures. Magical PPT to Long Picture Software for windows has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Driver's License windows client has dll hijacking vulnerability
Driver's License is traffic regulations learning software. A dll hijacking vulnerability exists in the Driving Exam Bao Dian windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Flying Book (Windows client) suffers from a dll hijacking vulnerability
Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...
Magical Image Splitter for windows is vulnerable to dll hijacking.
Magic Image Splitter is a software to split images into multiple image blocks. Magical Image Splitter for windows has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
1E Client Privilege Permission and Access Control Issues Vulnerability
1E Client is an agent-less endpoint management software from 1E USA. A security vulnerability exists in 1E Client version 5.0.0.745 that stems from %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe failing to handle unreferenced paths. This may allow a remote attacker to gain elevated...