13073 matches found
DLL Hijacking Vulnerability in Yimin Master Gold Nuggets Client Software
Founded in 2005, Yimin Co., Ltd. provides customers with three major businesses, namely, securities assisted decision-making software, investor education, and investment consulting, and is committed to improving the profitability of its users. Tencent is the second largest shareholder of the...
Programming Cat Format Factory Command Execution Vulnerability
Programming Cat Format Factory is a useful programming format conversion tool. Programming Cat Format Factory suffers from a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into a client process to perform arbitrary functions...
Command Execution Vulnerability in LeTeachLearn Student Client
LeTeachLearn Student is an app that provides attentive after-school tutoring. A command execution vulnerability exists in LeTaoLeXue Student Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...
Emotet returns just in time for Christmas
Emotet is a threat we have been tracking very closely throughout the year thanks to its large email distribution campaigns. Once again, and for about two months, the botnet stopped its malspam activity only to return days before Christmas. In typical Emotet fashion, the threat actors continue to...
Security Bulletin: Security vulnerability in IBM Java SDK affecting Rational Synergy (CVE-2019-4732)
Summary There is a security vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55 used by Rational Synergy versions 7.2.1.0 to 7.2.1.7. Rational Synergy has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732...
A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says
As the probe into the SolarWinds supply chain attack continues, new digital forensic evidence has brought to light that a separate threat actor may have been abusing the IT infrastructure provider's Orion software to drop a similar persistent backdoor on target systems. "The investigation of the...
dll hijacking vulnerability in NetEase Cloud Music (Windows client)
NetEase Cloud Music is a music player that focuses on discovery and sharing. A dll hijacking vulnerability exists in NetEase Cloud Music Windows client, which can be exploited by attackers to load a malicious dll and execute malicious code...
Format Factory (Windows client) suffers from a dll hijacking vulnerability
Format Factory is a free multifunctional multimedia format conversion software. A dll hijacking vulnerability exists in Format Factory Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intelligence to understand the scope, impact, remediation guidance, and product detections and...
Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intelligence to understand the scope, impact, remediation guidance, and product detections and...
JVN#94244575: Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries
Self-Extracting files created by multiple SEIKO EPSON products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the Self-Extracting files. Solution Update t...
DLL Hijacking Vulnerability in XMind8 (Windows Client)
Shenzhen AIS Software Technology Co., Ltd. business scope includes: computer software and hardware, mobile Internet technology development, gift sales; domestic trade, business import and export, etc.. XMind8 Windows client has a DLL hijacking vulnerability that can be exploited by attackers to...
Netease Youtao Dictionary PC version suffers from dll hijacking vulnerability (CNVD-2020-73477)
Netease Yudao Dictionary is a multi-language translation software. A dll hijacking vulnerability exists in Netease Youdao Dictionary for PC. An attacker can exploit this vulnerability to execute malicious code...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...
Microsoft Windows DrawIconEx Local Privilege Escalation Exploit
This Metasploit module exploits CVE-2020-1054, an out of bounds write reachable from DrawIconEx within win32k. The out of bounds write can be used to overwrite the pvbits of a SURFOBJ. By utilizing this vulnerability to execute controlled writes to kernel memory, an attacker can gain arbitrary co...
The vulnerability of the DLL library loading mechanism of the Cisco Webex Teams software for Windows allows a malicious actor to load a malicious library into the system.
The vulnerability of the DLL library loading mechanism for Cisco Webex Teams software for Windows is related to errors in processing path handling for directories. Exploiting this vulnerability can allow an attacker to load the malicious library into memory...
Sogou Input Method (Windows client) suffers from dll hijacking vulnerability
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
MindManager 2018 with dll hijacking vulnerability at Suzhou Citrix Markdin Software Co.
MindManager 2018 is a mind mapping software. A dll hijacking vulnerability exists in MindManager 2018 by Suzhou Citrix Markdin Software Co. An attacker can exploit this vulnerability to execute malicious code...
NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)
Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...
