Python DLL Load Local Command Execution Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. Python suffers from a local command execution vulnerability. A local attacker could exploit the vulnerability to execute arbitrary code in the context of an affected application...

Hotspot Shield DLL Hijacking

Exploit Title: Hotspot Shield DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com/ Software Link: https://mydati.com/download/hss-win2/HSS-773.exe Version: Tested on:Windows 7...

Dropbox: Subtile Code Injection Vulnerability in Dropbox for Windows

A mistake in our compilation meant that one of our Qt libraries was unintentionally loading a openssl.cnf from another user on Windows. The config file allowed the other user to specify a DLL to load, which meant that a user with this specific username could escalate privileges and execute code a...

Flexera InstallShield Privilege Escalation Vulnerability

Flexera InstallShield is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer Version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer Version contains an issue with the DLL search path, which may lead to insecurely loading dynamic linking...

Enpass DLL Load Local Code Execution Vulnerability

Enpass is a complete password management solution. A local code execution vulnerability exists in Enpass DLL loading. This allows a local attacker to exploit the vulnerability to execute arbitrary code within the context of the affected application...

VMware Fusion 8.1.x < 8.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Fusion installed on the remote Mac OS X host is 8.1.x prior to 8.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the curre...

VMware Workstation 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Workstation installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

VMware Player 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010) (Linux)

The version of VMware Player installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

VMware Player 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Player installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

Any Video Converter 5.9.5 DLL Hijacking

Credits: HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ANY-VIDEO-CONVERTER-DLL-HIJACK.txt + ISR: ApparitionSec Vendor: =========================== www.any-video-converter.com Product: ==================================== AVCSoft / Any Video...

Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3289)

A use after free vulnerability was discovered within Microsoft Internet Explorer. The root cause comes from dll file triggering a use after free condition. A successful exploitation of this issue could allow an attacker to execute arbitrary code on the remote system...

Design/Logic Flaw

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

KLA10854 Privileges escalation vulnerabilities in VMware products

Untrusted search path vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijack. Technical details This vulnerability related to HGFS aka Shared Folders feature. Original advisories...

Huawang Cloud DLL and exe Hijacking Vulnerability

Huawang Cloud is an Internet broadband resources and server platform architecture system, with a set of cloud computing data center, able to provide a variety of technical services, and able to provide users with a smooth and clear experience of the video conferencing system. There are multiple d...

VMware Host Guest Client Redirector - DLL Side Loading (Metasploit)

require 'msf/core' class MetasploitModule 'DLL Side Loading Vulnerability in VMware Host Guest Client Redirector', 'Description' = %q A DLL side loading vulnerability was found in the VMware Host Guest Client Redirector, a component of VMware Tools. This issue can be exploited by luring a victim...

VMware ESXi updates address multiple important security issues (VMSA-2016-0010)

A DLL hijacking vulnerability is present in the VMware Tools SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SMB Delivery Module

require 'msf/core' require 'msf/core/exploit/powershell' class MetasploitModule "SMB Delivery", 'Description' = %q This module serves payloads via an SMB server and provides commands to retrieve and execute the generated payloads. Currently supports DLLs and Powershell. , 'License' = MSFLICENSE,...

DLL Side Loading Vulnerability in VMware Host Guest Client Redirector

A DLL side loading vulnerability was found in the VMware Host Guest Client Redirector, a component of VMware Tools. This issue can be exploited by luring a victim into opening a document from the attacker's share. An attacker can exploit this issue to execute arbitrary code with the privileges of...

VMware product updates address multiple important security issues

a. DLL hijacking issue in Windows-based VMware Tools A DLL hijacking vulnerability is present in the VMware Tools "Shared Folders" HGFS feature running on Microsoft Windows. Exploitation of this issue may lead to arbitrary code execution with the privileges of the victim. In order to exploit this...