13176 matches found
Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'MS16-016 mrxdav.sys WebDav Local Privilege Escalation',...
Notepad++ 6.9.2 DLL Hijacking
Aloha, npp.6.9.2.Installer.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If a...
JetBrains PyCharm Professional 2016.1.4 DLL Hijacking
Aloha, pycharm-professional-2016.1.4.exe loads and executes dwmapi.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...
JVN#51565015: LINE for Windows may insecurely load Dynamic Link Libraries
LINE for Windows provided by LINE Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privileges of the running application. Solution Update the Software For cuurent users of LINE for...
360 Total Security 2016 DLL Hijacking
Aloha, 360TSESetup8.2.0.1039.exe loads and executes WindowsCodecs.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...
Hide.Me VPN Client 1.2.4 Privilege Escalation
Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...
Hide.Me VPN Client 1.2.4 - Local Privilege Escalation
Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...
The vulnerability of VMware Fusion allows users of the guest operating system to execute code on the host operating system.
The vulnerability of the TPView.dll library in VMware Fusion relates to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...
The vulnerability of VMware Player allows users of the guest operating system to execute code on the host operating system.
The vulnerability of the TPInt.dll library in VMware Player’s hypervisor is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...
The vulnerability of the client system in the VMware Horizon View Client virtualization solution allows users of the guest operating system to trigger a service failure for the host operating system.
The vulnerability of the TPView.dll library in the VMware Horizon View Client virtualization solution is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...
Python 3.5.2 DLL Hijacking
Aloha, python-3.5.2.exe loads and executes fwbase.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...
InstantHMI 6.1 Privilege Escalation
itle: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program,...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the maintenanceinstaller.exe installer of Mozilla Firefox ESR allows local users to elevate their privileges by placing a Trojan DLL file in the temporary folder during the update process...
The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures
The server processes agent.exe, rmngr.exe, and rhost.exe of the enterprise automation system 1C:Enterprise use the same module rtrsrvc.dll for working with TCP connections. A specially crafted TCP packet leads to an initialization error, which in turn causes incorrect memory reading at the zero...
The vulnerability of the Dr.Web Enterprise Security Suite, a antivirus protection tool, allows a hacker to execute arbitrary code.
The vulnerability in the update mechanism of the Dr.Web Enterprise Security Suite lies in the lack of encryption for network traffic between the update server and the software being updated. The HTTP network connection is established without using TSL or SSH. This allows a malicious actor to carr...
CVE-2016-4560
Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file...
Design/Logic Flaw
Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file...
CVE-2016-4560
Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file...
Putty Beta 0.67 DLL Hijacking
/ Exploit Title: Putty DLL Hijacking Exploit UxTheme.dll or ntmarta.dll Vendor Homepage:https://the.earth.li/sgtatham/putty/latest/x86/putty.exe Author: Sachin Wagh @tigertigerboy Linkedin: https://in.linkedin.com/in/sachin-wagh-95b17555 Affected Version: beta 0.67 Tested on: Windows 7 Ultimate /...
Haxx cURL and libcurl untrusted search path vulnerability
Haxx cURL and Libcurl are both products of the Swedish company Haxx. cURL is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. An untrustworthy search path vulnerability exists in Haxx cURL and libcurl...