CVE-2025-26860

The CVE-2025-26860 entry concerns RemoteCall Remote Support Program (for Operator) prior to version 5.1.0. The vulnerability is an uncontrolled search path element (CWE-427) that can allow arbitrary code execution if a crafted DLL is placed in the application’s folder. Documents confirm the root ...

CVE-2025-26859

RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

PT-2025-41961

Name of the Vulnerable Software and Affected Versions FortiClient versions 7.0 through 7.2.11 and 7.4.0 through 7.4.3 Description An uncontrolled search path element issue exists in FortiClient on Windows. A local, low-privileged user could potentially perform a DLL hijacking attack by placing a...

CVE-2025-57781

The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer...

EUVD-2017-8960

Malware in sbrugna...

EUVD-2020-17151

Malware in sbrugna...

EUVD-2016-8433

Malware in sbrugna...

EUVD-2018-2717

Malware in sbrugna...

EUVD-2018-2718

Malware in sbrugna...

EUVD-2019-11393

Malware in sbrugna...

EUVD-2020-30637

Malware in sbrugna...

How we trained an ML model to detect DLL hijacking

DLL hijacking is a common technique in which attackers replace a library called by a legitimate process with a malicious one. It is used by both creators of mass-impact malware, like stealers and banking Trojans, and by APT and cybercrime groups behind targeted attacks. In recent years, the numbe...

EUVD-2025-32488

The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer...

The vulnerability of the Zabbix Agent and Agent2 components of the Zabbix monitoring system allows attackers to increase their privileges.

The vulnerability of Zabbix Agent and Agent2 components of the Zabbix IT infrastructure monitoring system is related to deficiencies in the mechanism for controlling the loading of the OpenSSL configuration file. Exploiting this vulnerability can allow attackers to enhance their privileges by...

EUVD-2025-27534

Malicious code in bioql PyPI...

EUVD-2025-31342

Malicious code in bioql PyPI...

EUVD-2025-17060

Malicious code in bioql PyPI...

EUVD-2025-32232

Malicious code in bioql PyPI...

CVE-2025-27237

In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL...

CVE-2025-27237

In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL...