Microsoft Windows Kernel DLL Path Error Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft windows kernel allows a local attacker to place a specially crafted dll file in a system directory or on a network share, which can be loaded by the target user to execute arbitrary code...

Schneider Electric OPC Factory Server DLL Load Arbitrary Code Execution Vulnerability

Schneider Electric OPC Factory Server OFS is a set of data communication editing software. The software supports access to important information, open page design, transparent architecture and interoperability to enable good processes and communication. A security vulnerability exists in the...

Ecava IntegraXor DLL Vulnerability

IntegraXor is the human-machine interface for creating and running Web-based SCADA systems. IntegraXor SCADA Server versions prior to 4.2.4488 have a security vulnerability in the handling of renamed malicious DLLs, which could allow an attacker to execute malicious code in an affected applicatio...

Bentley Microstation Arbitrary Code Execution Vulnerability

Bentley Systems Microstation is a suite of 2D and 3D CAD information modeling software from Bentley Systems, USA. The software provides drawing and modeling tools, rendering effects and animations, engineering drawings and drawing documentation. An arbitrary code execution vulnerability exists in...

Adobe LiveCycle ES DLL Loading Arbitrary Code Execution Vulnerability

Adobe LiveCycle ES Enterprise Suite is the United States of America Odo than Adobe the company's set of enterprise and government applications developed by the building platform. The platform is mainly used to build automated business process applications, and the integration of many Adobe tools,...

Telerik Analytics Monitor Library Search Path Vulnerability

Telerik Analytics Monitor Library is a library for third-party application analytics services to collect information about applications. A search path vulnerability in Telerik Analytics Monitor Library allows local attackers to exploit the vulnerability to execute in the context of an application...

Elipse E3 Process Control Vulnerability

Elipse E3 is the monitoring control and data acquisition system. A process control vulnerability in the Elipse E3 application caused by a third-party DLL can be successfully exploited to cause arbitrary code execution...

PT-2015-4468 · Microsoft · Windows 8 +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold a...

iPass Open Mobile Windows Client Remote Code Execution Vulnerability

iPass Open Mobile is a quick and easy way for you to use your device to connect to over a million enabled WIFIs around the world. A security vulnerability exists in the iPass Open Mobile client that allows attackers to register arbitrary DLLs via UNC shared pathnames by sending specially crafted...

Macroplant iExplorer Untrustworthy Search Path Vulnerability

Macroplant iExplorer is an explorer for viewing files for the iOS platform from Macroplant USA. Macroplant iExplorer suffers from an untrusted search path vulnerability. A local attacker can exploit this vulnerability by executing arbitrary code via the Trojan horse itunesmobiledevice.dll file to...

Corel FastFlick Has Multiple DLL Load Arbitrary Code Execution Vulnerabilities

Corel FastFlick is a video editing software. Corel FastFlick suffers from multiple DLL Load Arbitrary Code Execution vulnerabilities that allow an attacker to construct a malicious DLL file that loads arbitrary code in the context of the application because Corel FastFlick fails to properly load...

Arbitrary Code Execution Vulnerability in Multiple Corel Product 'wintab32.dll' DLL Loads

Founded in 1985 and headquartered in Ottawa, Canada, Corel is a leading manufacturer specializing in digital multimedia applications. An arbitrary code execution vulnerability exists in the loading of the 'wintab32.dll' DLL in multiple Corel products, which allows attackers to construct malicious...

Linux dynamic link library contains the vulnerability-vulnerability warning-the black bar safety net

Description Nebula is the one for Linux. the right to exploit exercises virtual machine,the first 1 5 off Level15 provides such a vulnerability of the program flag15 ! Find the link named libc. so. 6 dynamic link libraries,but the/var/tmp directory for the current userlevel15can be written,it...

Zero-day exploit“sandworm”how to step by step enter your system Microsoft on patch today May to-vulnerability warning-the black bar safety net

! 0 9at Microsoft this month the Update Patch before the release, Trend Micro yesterday released the latest zero-day vulnerability“sandworm”CVE-2 0 1 4-4 1 1 4of the analysis report, the safety of cattle is considered that the vulnerability analysis is by far the most clear and easy to understand...

CVE-2014-1520

maintenserviceinstaller.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process...

Foxit Reader < 6.1.4 Trojan DLL Injection

The version of Foxit Reader installed on the remote Windows host is prior to 6.1.4. It is, therefore, affected by a flaw in how dynamic-link library DLL files are located and loaded, specifically file imgseg.dll. The application uses a fixed path to search for this file, and the path can include...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the...

New Reveton Ransomware Variant Steals Passwords

The developers of Reveton have expanded that ransomware’s repertoire with a password stealing functionality, according to new research. Ransomware, sometimes called scareware, is a type of malware that locks down infected machines, offering to unlock them only after a fee has been paid. Oftentime...

Foxit Reader < 5.4.3 Trojan DLL Injection

The version of Foxit Reader installed on the remote Windows host is prior to 5.4.3. It is, therefore, affected by a flaw in how dynamic-link library DLL files are located and loaded, specifically file fxdecod1.dll. The application uses a fixed path to search for this file, and the path can includ...