Kingsoft Wordsmith 2016 (Windows client) suffers from a dll hijacking vulnerability

Kingsoft Wordsmith 2016 is a free translation software for personal users, and the new version has a great value, offering features such as live voice and on-screen word extraction. A dll hijacking vulnerability exists in Kingsoft Wordmaster 2016 Windows client. An attacker can exploit the...

Foxmail (Windows client) suffers from a dll hijacking vulnerability

Foxmail is a domestic e-mail client software, providing Internet standards-based e-mail sending and receiving, digital signatures and encryption, local mailbox mail search and anti-spam and other functions. A dll hijacking vulnerability exists in Foxmail Windows client. An attacker can exploit th...

Xunlei 11 (Windows client) suffers from dll hijacking vulnerability

Thunderbolt 11 is a computer downloader software. A dll hijacking vulnerability exists in Xunlei 11 Windows client. An attacker can exploit this vulnerability to execute malicious code...

CVE-2020-13542

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...

CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

Design/Logic Flaw

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

CVE-2020-6021

CVE-2020-6021 affects Check Point Endpoint Security Client for Windows prior to version E84.20. The vulnerability arises because the MS Installer repair process runs with the client’s privileges and allows normal users to trigger an installation repair, enabling placement of a crafted DLL in the ...

CVE-2020-6021

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

Jiajia 3GP Format Converter is vulnerable to dll hijacking.

Jiajia 3GP Format Converter is a professional and easy-to-use 3GP mobile video format converter. Jiajia 3GP Converter can easily convert various popular video formats 3GP, 3G2, 3GPP, MP4, AVI to video formats. Jiajia 3GP Format Converter has a dll hijacking vulnerability, the program does not che...

Jiajia All-in-One Video Format Converter is vulnerable to dll hijacking.

Jiajia All-in-One Video Format Converter is a professional, easy-to-use and smart video format converter. Jiajia All-in-One Video Format Converter suffers from a dll hijacking vulnerability, which can be exploited by an attacker to obtain server control privileges by hijacking the dll loaded when...

Jiajia WMV Format Converter is vulnerable to dll hijacking.

Jiajia WMV Format Converter is a professional and easy-to-use WMV video format converter. Jiajia WMV Format Converter suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

Jiajia MP4 Format Converter is vulnerable to dll hijacking.

Jia Jia MP4 Format Converter is a professional MPEG4 format converter. The MPEG-4 encoder of Jia Jia MP4 Format Converter can help you convert various video formats to MPEG4/AVC video formats. Jiajia MP4 Format Converter suffers from a dll hijacking vulnerability, which can be exploited by an...

Jiajia MPG Format Converter is vulnerable to dll hijacking.

Jiajia MPG Converter is a professional and easy-to-use MPG, MPEG-2 video format converter. Jiajia MPG Format Converter suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll, resulting in dll hijacking to gain server control privileges...

Nation-State Hackers Caught Hiding Espionage Activities Behind Crypto Miners

A nation-state actor known for its cyber espionage campaigns since 2012 is now using coin miner techniques to stay under the radar and establish persistence on victim systems, according to new research. Attributing the shift to a threat actor tracked as Bismuth, Microsoft's Microsoft 365 Defender...

Threat actor leverages coin miner techniques to stay under the radar – here’s how to spot them

Cryptocurrency miners are typically associated with cybercriminal operations, not sophisticated nation state actor activity. They are not the most sophisticated type of threats, which also means that they are not among the most critical security issues that defenders address with urgency. Recent...

Threat actor leverages coin miner techniques to stay under the radar – here’s how to spot them

Cryptocurrency miners are typically associated with cybercriminal operations, not sophisticated nation state actor activity. They are not the most sophisticated type of threats, which also means that they are not among the most critical security issues that defenders address with urgency. Recent...

Vientiane Webmaster 2008 Plus suffers from dll hijacking vulnerability

Vientiane Webmaster is a management tool created by Vientiane for Internet cafe owners. Vientiane Webmaster 2008 Enhanced Edition suffers from a dll hijacking vulnerability, which can be exploited by attackers to load untrusted dlls for command execution...

PDF Cat Split & Merge Software Exploits a dll Hijacking Vulnerability

PDF Cat Split and Merge Software is a PDF file to merge the operation of the software. PDF Cat Split & Merge Software has a dll hijacking vulnerability, which can be exploited by attackers to load a dll without signing and file verification, resulting in dll hijacking...