4151 matches found
CVE-2025-1729
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...
CVE-2025-1729
CVE-2025-1729 affects Lenovo TrackPoint Quick Menu (TPQMAssistant.exe). A DLL hijacking flaw allows a local attacker to escalate privileges by placing a malicious hostfxr.dll in the TPQM directory where the binary is launched; the TPQM folder is writable by standard users, enabling this. The issu...
CVE-2025-1700
CVE-2025-1700 describes a DLL hijacking weakness in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during software installation. The affected component is the installer for Motorola Software Fix, and the root cause is DLL ...
CVE-2025-1700
A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...
CVE-2025-1700
A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...
PT-2025-29956 · Motorola · Motorola Software Fix
Name of the Vulnerable Software and Affected Versions: Motorola Software Fix Rescue and Smart Assistant affected versions not specified Description: A DLL hijacking issue exists in the Motorola Software Fix Rescue and Smart Assistant installer. This could allow a local attacker to escalate...
Lenovo TrackPoint Quick Menu 安全漏洞
Lenovo TrackPoint Quick Menu is a shortcut menu program from the Chinese company Lenovo. A security vulnerability exists in Lenovo TrackPoint Quick Menu, which stems from the presence of a DLL hijacking vulnerability that could lead to elevation of privilege by a local attacker...
CVE-2024-24916 DLL-HiJacking
Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...
RansomLord NG Anti-Ransomware Exploit Tool 1.0
RansomLord is a proof-of-concept tool that automates the creation of PE files, used to compromise ransomware pre-encryption. This tool uses dll hijacking to defeat ransomware by placing PE files in the x32 or x64 directories where the program is run from. This is the NG version that currently...
Exploit for Uncontrolled Search Path Element in Notepad-Plus-Plus Notepad\+\+
⚠️ IMPORTANT NOTICE: For security research and educational p...
CVE-2025-49148 ClipShare Server Allows Local Privilege Escalation via DLL Hijacking
ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...
CVE-2025-49148
CVE-2025-49148 affects ClipShare Server for Windows prior to 3.8.5. The root cause is the use of the default Windows DLL search order, causing the server to load system libraries (e.g., CRYPTBASE.dll, WindowsCodecs.dll) from its own directory. A local, non-privileged user who can write to the fol...
CVE-2025-49148 ClipShare Server Allows Local Privilege Escalation via DLL Hijacking
ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...
CVE-2024-12168
Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-12168
Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-12168
Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-12168 DLL Hijacking in Yandex Telemost
Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-12168
CVE-2024-12168 affects Yandex Telemost for Desktop prior to version 2.7.0. The vulnerability is a DLL hijacking flaw caused by the use of an untrusted search path, potentially enabling arbitrary code execution. Reported CVSS vectors indicate HIGH impact with LOCAL access and user interaction requ...