CVE-2017-10893

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Cisco WebEx WRF Player Multiple Vulnerabilities (cisco-sa-20171129-webex-players)

The version of Cisco WebEx WRF Player installed on the remote host is affected by multiple vulnerabilities. A remote attacker could exploit these by providing a user with a malicious WRF file that in some cases could allow arbitrary code execution. C Tenable Network Security, Inc...

Design/Logic Flaw

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is launched from a directory where an attacker has already created a Trojan horse dwmapi.dll file...

CVE-2017-17069

ActiveSetupN.exe in Amazon Audible for Windows prior to November 2017 is vulnerable to DLL hijacking: if the executable is started from a directory where an attacker has placed a malicious dwmapi.dll, an arbitrary DLL can be loaded, enabling code execution. Root cause: improper DLL loading by Act...

Qtouch General Edition is vulnerable to an untrustworthy code loading flaw

Qtouch General Purpose Edition is automation software that integrates the functions of device communication, graphic display, data conversion, logic processing, etc. and provides secondary development. Qtouch Universal Edition is vulnerable to an untrustworthy code loading flaw. The attacker...

Amazon Audible DLL Hijacking

Aloha, Introduction: Vendor: Amazon Affected Product: Audible Software for Windows PC Fixed in: Latest Version released by the vendor Vendor Website: https://www.audible.com/ Vulnerability Type: Privilege Escalation CVE: CVE-2017-17069 Credit: Himanshu Mehta @LionHeartRoxx Summary: Audible contai...

TeamViewer 11 < 13 (Windows 10 x86) - Inline Hooking / Direct Memory Modification Permission Change

TeamViewer Permissions Hook V1 --- A proof of concept injectable C++ DLL, that uses naked inline hooking and direct memory modification to change TeamViewer permissions. Features As the Server - Enables extra menu item options on the right side pop-up menu. Most useful so far to enable the "switc...

TeamViewer 11 13 (Windows 10 x86) - Inline Hooking Direct Memory Modification Permission Change

TeamViewer 11 13 Windows 10 x86 - Inline Hooking Direct Memory Modification Permission Change TeamViewer Permissions Hook V1 --- A proof of concept injectable C++ DLL, that uses naked inline hooking and direct memory modification to change TeamViewer permissions. Features As the Server - Enables...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10891

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10891

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection

Introduction TLS Thread Local Storage callbacks are provided by the Windows operating system to support additional initialization and termination for per-thread data structures. As previously reported, malicious TLS callbacks, as an anti-analysis trick, have been observed for quite some time and...

Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now

Security researchers have discovered a potentially dangerous vulnerability in the firmware of various Hewlett Packard HP enterprise printer models that could be abused by attackers to run arbitrary code on affected printer models remotely. The vulnerability CVE-2017-2750, rated as high in severit...

CVE-2017-8137

HedEx Earlier than V200R006C00 versions has a dynamic link library DLL hijacking vulnerability due to calling the DDL file by accessing a relative path. An attacker could exploit this vulnerability to tamper with the DLL file, leading to DLL hijacking...