Design/Logic Flaw

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

CVE-2018-0544 affects WinShot 1.53a and earlier installers, due to an untrusted DLL search path (CWE-427). An attacker could load a Trojan horse DLL from a directory, executing arbitrary code with the privileges of the user invoking the installer. Reports from JVN indicate the vulnerability is co...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

What to Do When Msvcp140.dll Goes Missing in Windows

By Waqas Imagine that you download a program or a software that This is a post from HackRead.com Read the original post: What to Do When Msvcp140.dll Goes Missing in Windows...

JVN#71816327: Installer of JTrim may insecurely load Dynamic Link Libraries

Installer of JTrim contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use ZIP file format JTrim When using JTrim, download the ZIP fi...

CVE-2018-7484

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...

Design/Logic Flaw

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...

CVE-2018-7484

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...

CVE-2018-7484

Summary: CVE-2018-7484 affects PureVPN on Windows up to 5.19.4.0. The installer grants Everyone Full Control to the installation directory, and PureVPNService.exe (running as NT Authority\SYSTEM) loads DLLs via relative paths. If the program starts from a directory that is writable by all users a...

CVE-2018-7484

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM privileges, tries to load several dynamic-link...

PureVPN Windows Elevation of Privilege Vulnerability

PureVPN is a paid VPN service. An elevation of privilege vulnerability exists in PureVPN for Windows version 5.19.4.0 and earlier. An attacker can exploit this vulnerability via DLL hijacking to achieve elevation of privilege...

Reflective DLL Injection, Windows x86 Bind Named Pipe Stager

Inject a DLL via a reflective loader. Listen for a pipe connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 349 include Msf::Payload::Stager include...

Mozilla Firefox/Thunderbird/SeaMonkey Untrusted Search Path Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Thunderbird is an email client developed by the Mozilla Foundation that is independent from the Mozilla Application Suite and supports IMAP, POP mail protocols, and HTML mail. Mozilla SeaMonkey is a free, open sourc...

PVS Imaging wizard failed to run on master target device

Error 1: PVS Imaging wizard failed to run with below error on master target device : The program can’t start because api-ms-win-crt-runtime-l1-1-0.dll is missing from your computer Error 2: imagingwizard.exe crashed when calling the following method: System.String.FormatSystem.IFormatProvider,...

Disk Pulse Enterprise 10.4.18 - 'Import Command' Buffer Overflow (SEH)

!/usr/bin/env python Exploit Title: Disk Pulse Enterprise v10.4.18 - 'Import Command' Buffer Overflow SEH Date: 2018-01-22 Exploit Author: Daniel Teixeira Author Homepage: www.danielteixeira.com Vendor Homepage: http://www.diskpulse.com Software Link:...

Security and Quality Rollup for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 (KB 4076493)

Security and Quality Rollup for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 KB 4076493 Notice This update has been released as part of the Preview of the Quality Rollup for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows...

February 2018 Preview of the Quality Rollups for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 (KB 4074806)

February 2018 Preview of the Quality Rollups for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 KB 4074806 Notice Update KB 4074806 has been released as part of the Preview of Quality Rollups for .NET Framework for February 2018. Parts of this update were...