CVE-2020-29654

Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account...

Design/Logic Flaw

Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account...

CVE-2020-29654

Western Digital Dashboard prior to version 3.2.2.9 is affected by a DLL hijacking vulnerability that can lead to SYSTEM-level compromise. The issue is due to DLL search order/type handling enabling privilege escalation on a local attacker, with the vulnerability affecting the dashboard executable...

CVE-2020-29654

Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account...

Metasploit Wrap-Up

In case you missed it, this past weekend the Metasploit team hosted the latest Metasploit CTF. We saw 1903 users register in this round and some excellent writeups have been published on what they found. If you participated but haven’t had a chance to fill out our feedback survey you can find it...

DLL Hijacking Vulnerability in Jiajia FLV Converter

Jiajia FLV Converter is a professional and easy-to-use FLV video format converter. A DLL hijacking vulnerability exists in Jiajia FLV Converter, which can be exploited by attackers to gain control of the server...

Jiajia Total Audio Format Converter is vulnerable to dll hijacking.

Jiajia All-in-One Audio Format Converter is a professional and easy-to-use audio format conversion tool, movie and video music extraction tool, audio compression tool. Jiajia Omni Audio Format Converter has a dll hijacking vulnerability, which can be exploited by attackers to gain control of the...

Security Bulletin: Multiple vulnerabilities in Db2 affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary IBM® Db2® shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise is vulnerable to information disclosure. Vulnerabilities have been identified in IBM Db2 and information about their fixes are published in a security bulletin. Vulnerability Details Refer to the security...

Qiyou Gaming Accelerator (Windows Client) has dll hijacking vulnerability

Qiyou Gaming Accelerator is a professional gaming-grade online game gas pedal. A dll hijacking vulnerability exists in Qiyou Gaming Accelerator Windows client. An attacker can exploit this vulnerability to execute malicious code...

CVE-2020-2049 Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation

A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory...

Microsoft Windows Multiple Vulnerabilities (KB4592468)

This host is missing a critical security update according to Microsoft KB4592468 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection (Windows)

A command injection vulnerability exists in IBM DB2 due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that Nessus has...

FastStone Capture suffers from dll hijacking vulnerability

FastStone Capture is an image viewing, editing and screenshotting tool. FastStone Capture suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to gain control of the server...

DLL Hijacking Vulnerability in MobaXterm Client

MobaXterm is the ultimate toolkit for remote computers. Being a single window program, it offers a lot of useful features for programmers, webmasters, IT administrators and many more users who need to deal with remote tasks. A DLL hijacking vulnerability exists in the MobaXterm client. An attacke...

IBM DB2 Connect 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection

A command injection vulnerability exists in IBM DB2 Connect due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that...

2345 Viewer windows client has dll hijacking vulnerability

2345 Viewer is one of the more common viewer programs with a high popularity rate. There is a dll hijacking vulnerability in the windows client of 2345 Viewer, which can be exploited by attackers to load malicious dlls and execute malicious code...

Attention Client is vulnerable to dll hijacking

Attention Client is a high-definition video communication cloud terminal launched by Suirui Technology for government, enterprises and other industrial customers. There is a dll hijacking vulnerability in Attention Client. An attacker can use this vulnerability to load a malicious dll and execute...

Chianson VPN PC client suffers from dll hijacking vulnerability

Chianxin is a comprehensive group of companies focusing on providing next-generation network security products and services to governments and enterprises. A dll hijacking vulnerability exists in the Chianson VPN PC client, which can be exploited by attackers to gain control of the server...

Mango TV client suffers from dll hijacking vulnerability

Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...

Three Kingdoms Online (Windows Client) suffers from dll hijacking vulnerability

Three Kingdoms Online is a card game. Three Kingdoms Kill Online Windows client suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...