CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai...

CVE-2016-10157

Akamai NetSession 1.9.3.1 is affected by CVE-2016-10157, a DLL hijacking vulnerability where the process loads CSUNSAPI.dll without a full path. The DLL is reportedly missing from the installation, which can enable a hijack and potential code injection into the Akamai NetSession process space. No...

Windows/x64 - CreateRemoteThread() DLL Injection Shellcode (584 bytes)

/ Title: Windows x64 dll injection shellcode using CreateRemoteThread Size: 584 bytes Date: 16-01-2017 Author: Roziul Hasan Khan Shifat Tested On : Windows 7 x64 / //Note : i wrtie it for process injection //It may work in exploit / section .text global start start: xor r8,r8 push r8 push r8 mov...

Windows x64 - CreateRemoteThread() DLL Injection Shellcode (584 bytes)

Windows x64 - CreateRemoteThread DLL Injection Shellcode 584 bytes. Shellcode exploit for Winx86-64 platform / Title: Windows x64 dll injection shellcode using CreateRemoteThread Size: 584 bytes Date: 16-01-2017 Author: Roziul Hasan Khan Shifat Tested On : Windows 7 x64 / //Note : i wrtie it for...

Advantech WebAccess Multiple Vulnerabilities

Advantech WebAccess is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS12-046: Description of the security update for Office 2010 (Vbe7.dll): July 10, 2012

MS12-046: Description of the security update for Office 2010 Vbe7.dll: July 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-046. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Telegram Desktop 0.10.1 DLL Hijacking Vulnerability

Tempest Security Intelligence Advisory ADV-6/2016 - Telegram Desktop version 0.10.1 is vulnerable to dll hijacking as it tries to load "COMBASE.dll" without supplying the absolute path, thus relying upon the presence of such dll on the system directory. Unsafe DLL search path in Telegram Desktop...

SoftMaker Office 201x Privilege Escalation

Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECTED directory "%TEMP%\7zSxxxxxxxx" to extract its payload, then executes "%TEMP%\7zSxxxxxxxx\spsetup.exe"...

Audacity 2.1.2 DLL Hijacking Vulnerability

Tempest Security Intelligence Advisory ADV-7/2016 - Audacity version 2.1.2 is vulnerable to dll hijacking as it tries to load avformat-55.dll without supplying the absolute path, thus relying upon the presence of such dll on the system directory. This behavior results in an exploitable dll...

Akamai NetSession 1.9.3.1 DLL Hijacking Vulnerability

Tempest Security Intelligence Advisory ADV-8/2016 - Akamai Netsession 1.9.3.1 is vulnerable to dll hijacking as it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned dll is missing from its installation. Thus making it possible to hijack...

TinyPDF Installer DLL Hijacking / Unsafe Temp Directory

Hi @ll, the executable installer "InstallTinyPDF.exe", available from , is surprise.- vulnerable: 1. DLL hijacking this is well-known and well-documented; see , , , and "InstallTinyPDF.exe" loads and executes UXTheme.dll and/or DWMAPI.dll from its "application directory" instead Windows' "system...

PDFAdd 1.2 DLL Hijacking

===================================================== Exploit Title : PDfAdd 1.2 - DLL Hijacking Vulnerability Date Discovered : 2016-12-22 Affected Products: PDfAdd v1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

Free M4A To MP3 Converter 9.3 DLL Hijacking

===================================================== Exploit Title : Free M4a to MP3 Converter 9.3 - DLL Hijacking Vulnerability Date Discovered : 2016-12-19 Affected Products: Free M4a to MP3 Converter v9.3 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

CVE-2016-7085

Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-3958/CVE-2016-3959: Golang vulnerabilities | Cloud Foundry

CVE-2016-3958/CVE-2016-3959: Golang vulnerabilities Medium Vendor Golang Versions Affected Golang versions prior to 1.5.4 and 1.6.x versions before 1.6.1 Description Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via ...

Popcorn Time 5.6 DLL Hijacking

===================================================== Exploit Title : Popcorn Time 5.6 - DLL Hijacking Vulnerability Date Discovered : 2016-12-20 Affected Products: Popcorn Time v5.6 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the atmfd.dll library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory...

Microsoft Windows IME Elevation of Privilege (MS16-130: CVE-2016-7221)

An elevation of privilege vulnerability exists in Windows Input Method Editor IME. The vulnerability is due to the way Input Method Editor improperly handles DLL loading. A locally authenticated attacker can exploit this vulnerability by running a specially crafted application...