Reflective DLL Injection, Reverse UDP Stager with UUID Support

Inject a DLL via a reflective loader. Connect back to the attacker with UUID Support This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 312 include Msf::Payload::Stager include...

Flets Azukeru for Windows Auto Backup Tool Untrusted Search Path Vulnerability

Flets Azukeru for Windows Auto Backup Tool is a Windows-based Flets Azukeru auto backup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Flets Azukeru for Windows Auto Backup Tool 1.0.3.0 and earlier versions. A remote attacker can exploit thi...

JVN#26255241: The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely load Dynamic Link Libraries

The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact...

Yandex Browser installer for Desktop DLL Hijacking Vulnerability

Yandex Browser is a free Chromium-based web browser developed by Russian web search company Yandex that uses the Blink typography engine and runs on Windows, OS X, Android and iOS. A DLL hijacking vulnerability exists in the Yandex Browser installer for desktop versions prior to 17.4.1. The...

Security Only update for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows Server 2012 (KB 4055270)

Security Only update for .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows Server 2012 KB 4055270 View products that this article applies to. Important If you have not been offered this security update, you may be running incompatible antivirus software, and...

Design/Logic Flaw

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7327

Vulnerability summary (CVE-2017-7327) : Yandex Browser installer for Desktop prior to 17.4.1 is affected by a DLL hijacking issue caused by untrusted search paths for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll, or profapi.dll. The issue can allow loading of arbitrary DLLs and crashing the ...

CVE-2017-5170

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element DLL Hijacking vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the...

Design/Logic Flaw

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element DLL Hijacking vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the...

CVE-2017-5170

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element DLL Hijacking vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the...

CVE-2017-5170

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element DLL Hijacking vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the...

CVE-2017-5170

Summary: CVE-2017-5170 affects Moxa SoftNVR-IA Live Viewer (Version 3.30.3122 and earlier). It stems from an Uncontrolled Search Path Element (DLL Hijacking) vulnerability where a malicious DLL could be loaded if placed in the application’s default install location, allowing code execution at the...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01923)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in dhplay.dll i...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01919)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Windows UAC Protection Bypass (Via Slui File Handler Hijack)

This module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary .exe application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler...

Jungo Windriver 12.5.1 - Local Privilege Escalation

// ConsoleApplication1.cpp : Defines the entry point for the console application. // include "stdafx.h" include include define device L"\\.\WINDRVR1251" define SPRAYSIZE 30000 typedef NTSTATUSWINAPI PNtAllocateVirtualMemory HANDLE ProcessHandle, PVOID BaseAddress, ULONG ZeroBits, PULONG...

Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 (KB 4055000)

Description of the Security and Quality Rollup for the .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows Server 2012 KB 4055000 View products that this article applies to. Summary This security update resolves a security feature bypass vulnerability that exists when Microsoft .NET...

Description of the Security and Quality Rollup for .NET Framework 4.6 on Windows Server 2008 SP2 (KB 4055002)

Description of the Security and Quality Rollup for .NET Framework 4.6 on Windows Server 2008 SP2 KB 4055002 Notice As of January 18, 2018, update 4055002 applies only to Windows Server 2008 SP2. For more information about the January 2018 Security and Quality Rollup for .NET Framework 4.6, 4.6.1,...