13073 matches found
Privilege escalation
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...
CVE-2016-6590
The CVE-2016-6590 issue is a local privilege-escalation caused by loading DLLs during boot/reboot without absolute paths in multiple Symantec products. Affected: IT Management Suite 8.0 (before HF4), ITMS 7.6 (before HF7); Ghost Solution Suite 3.1 (before MP4); Endpoint Virtualization 7.x (before...
Persistence – AppInit DLLs
Windows operating systems provide the functionality to allow custom DLL's to be loaded into the address space of almost all application processes. This can give the opportunity for persistence since an arbitrary DLL can be loaded that will execute code when applications processes are created on t...
Nord Security: Race condition (TOCTOU) in NordVPN can result in local privilege escalation
Summary: A vulnerability exists in the NordVPN service, which is installed as part of the NordVPN Windows app. By exploiting a race condition in the NordVPN service it is possible to launch OpenVPN with a user-supplied configuration file. By setting an OpenSSL engine name within this configuratio...
SysWhispers - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to 10. Example generated files available in example-output/. Introduction Various security products place hooks in user-mode APIs which allow...
Update for the d3dcompiler_47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2
Update for the d3dcompiler47.dll component on Windows Server 2012, Windows 7, and Windows Server 2008 R2 This article describes an update that addresses an issue in Windows Server 2012, Windows 7 Service Pack 1 SP1, and Windows Server 2008 R2 SP1 that is described in the following Knowledge Base...
Heap overflow
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...
CVE-2013-3941
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...
Oriental Fortune PC client suffers from dll hijacking vulnerability
Oriental Wealth PC Client is a free stock speculation software developed by Oriental Wealth. There is a dll hijacking vulnerability in Oriental Wealth PC Client, which can be exploited by attackers to execute arbitrary code...
Xiaozhi Desktop is vulnerable to dll hijacking
Xiaozhi Desktop is a desktop organizer developed by Shenzhen Evergreen Technology Co. to improve office efficiency. Xiaozhi Desktop has a dll hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...
Softmedia Rubik's Cube is vulnerable to dll hijacking.
Softmedia Magic is a system optimization software developed by Qingdao Softmedia Network Technology Co. The client side of iSoftMedia Magic has a dll hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...
115 PC version suffers from dll hijacking vulnerability
115 PC version is a collection of 115, 115 organization, browser PC client of Guangdong One One Five Technology Co. 115 PC client has a dll hijacking vulnerability, which can be exploited by an attacker to execute arbitrary code...
Xiaozhi Dual Core Browser suffers from dll hijacking vulnerability
Xiaozhi Duo Browser, a secure dual-core browser with built-in Chromium and IE kernels. Xiaozhi Dual Core Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server privileges...
All K Song has a dll hijacking vulnerability
All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...
Sailfish Browser suffers from a dll hijacking vulnerability
Sailfish Browser is a web browser. A dll hijacking vulnerability exists in the Sailfish Browser client, which can be exploited by attackers to execute arbitrary code...
Ant Browser suffers from dll hijacking vulnerability
Ant Browser is a lightweight browser software developed by Beijing Ant Browser Company. Ant Browser suffers from a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...
CCTV Video for PC suffers from dll hijacking vulnerability
CCTV for PC is a live network TV broadcasting software. CCTV Video for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...
CVE-2019-6019
Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...