Lenovo System Interface Foundation Unsigned DLL Loading Vulnerability

The Lenovo System Interface Foundation is a collection of system services, drivers and plug-ins that support Lenovo Vantage applications. An unsigned DLL loading vulnerability exists in Lenovo System Interface Foundation versions prior to 1.1.18.3. An attacker can exploit this vulnerability to lo...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

CVE-2019-16861

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated...

Code injection

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

Code injection

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated...

CVE-2019-16861

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated...

CVE-2019-16861

Code42 Server up to version 7.0.2 on Windows is affected by an Untrusted Search Path vulnerability. A non-administrative attacker on the local server could create or modify a DLL that the Code42 service loads at runtime, potentially executing arbitrary code with elevated privileges on the local s...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

CVE-2019-16860

CVE-2019-16860 affects Code42 app (Windows) up to v7.0.2. An Untrusted Search Path could let a non-admin local attacker create/modify a DLL that the Code42 service loads at runtime, potentially enabling arbitrary code execution with elevated privileges. Red Hat and CNVD entries confirm the same d...

Windows Escalate UAC Protection Bypass Via Dot Net Profiler

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Escalate UAC Protection Bypass Via dot net profiler', 'Description' = %q Microsoft Windows allows for the automatic loading of a profilin...

CVE-2019-18215

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the...

CVE-2019-18215

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the...

Design/Logic Flaw

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the...

CVE-2019-18215

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the...

CVE-2019-18215

The CVE affects Comodo Internet Security (signmgr.dll 6.5.0.819 in versions up to 12.0). It describes a DLL preloading vulnerability where an unsigned iLog.dll can be planted in a partially unprotected product directory and loaded into a high-privileged service before the binary signature validat...

CVE-2019-11153

CVE-2019-11153 involves memory corruption in the Intel PROSet/Wireless WiFi Software extension DLL prior to version 21.40. The vulnerability can be exploited by an authenticated, local user to achieve escalation of privilege, information disclosure, and denial of service. Affected component is th...

CVE-2019-7962

Adobe Illustrator CC versions 23.1 and earlier are affected by CVE-2019-7962 due to an insecure library loading (DLL hijacking) vulnerability. The underlying issue is loading of malicious libraries from user-writable paths, enabling privilege escalation on a local system. Affected products includ...

CVE-2019-7960

Adobe Animate CC versions 19.2.1 and earlier are affected by CVE-2019-7960 due to an insecure library loading (dll hijacking) vulnerability, enabling local privilege escalation. The root cause is loading external libraries in a way that can be hijacked, leading to elevation of privileges on Windo...

Renren Video pc client software suffers from dll hijacking vulnerability

YYeTs started out as a non-professional subtitle group for foreign film and television programs for the purpose of sharing, exchanging and learning. Formerly known as YYeTs Subtitle Group, it was founded in 2003 by a Canadian-Chinese student, Little Ghost God, who formally set up an independent...

Mickey video pc client software suffers from dll hijacking vulnerability

Migu Video Client is a video software launched by China Mobile to watch various live broadcasts. Migu Video pc client software suffers from a dll hijacking vulnerability, which can be exploited by an attacker to inject a DLL file to execute arbitrary commands...