FortiClient - installer DLL Hijacking Vulnerability

Multiple unsafe search path vulnerabilities in FortiClient online installers may allow an attacker with control over the directory in which the installers reside to execute arbitrary code on the system via uploading malicious .dll files in that directory...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

SharpRDP - Remote Desktop Protocol .NET Console Application For Authenticated Command Execution

To compile open the project in Visual Studio and build for release. Two DLLs will be output to the Release directory, you do not need those because the DLLs are in the assembly. If you do not want to use the provided DLLs you will need to .NET SDK to create the AxMSTSCLib.dll DLL. To create it...

Realtek Audio Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-30506 Potential Impact: DLL preloading and potential abuses Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-19705 Summary Description: Realtek has released a software security update for the Realtek Audio Drivers for Windows. This update...

Realtek Audio Driver Vulnerability - Lenovo Support US

No description provided...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Design/Logic Flaw

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

CVE-2020-9418 affects PDFescape Desktop (≤ 4.0.22). The installer is vulnerable to DLL hijacking due to an untrusted search path, enabling local privilege elevation and code execution. Affected component: installer binary; root cause: DLL search order/location handling. Exploitation is described ...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Adobe Prelude CC < 8.1.1 Arbitrary Code Execution (APSB19-35)

The version of Adobe Prelude CC installed on the remote Windows host is prior to 8.1.1 It is, therefore, affected by a vulnerability as referenced in the apsb19-35 advisory: - Insecure Library Loading DLL hijacking potentially leading to arbitrary code execution CVE-2019-7961 Note that Nessus has...

Tencent Computer Butler PC client suffers from Dll hijacking vulnerability

Tencent PC Butler is a free security software launched by Tencent. It has the functions of cloud checking and killing Trojans, system acceleration, vulnerability repair, real-time protection, network speed protection, computer clinic, health assistant, desktop organization, document protection an...

Persistence – DLL Hijacking

When a program is starting a number of DLLs are loaded into the memory space of its process. Windows is searching the DLLs that are… Continue reading - Persistence - DLL Hijacking...

Adobe Premiere Pro CC < 13.1.3 Remote Code Execution (APSB19-33)

The version of Adobe Premiere Pro CC installed on the remote Windows host is prior to 13.1.3. It is, therefore, affected by a vulnerability as referenced in the apsb19-33 advisory: - Insecure Library Loading DLL hijacking potentially leading to arbitrary code execution CVE-2019-7931 Note that...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Design/Logic Flaw

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

CVE-2017-12580

CVE-2017-12580 affects IDM UltraEdit up to 24.10.0.32. The vulnerability is a DLL preloading issue: on unpatched Windows systems, placing a DLL named like a Windows DLL (e.g., ntmarta.dll) in the same directory as the affected installer EXE causes the preloaded DLL in the executable’s current dir...

Design/Logic Flaw

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...