CVE-2023-43625

A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...

PT-2023-6048 · Siemens · Simcenter Amesim

Name of the Vulnerable Software and Affected Versions: Simcenter Amesim versions prior to V2021.1 Description: The issue is related to incorrect code generation management in the Simcenter Amesim platform, which can be exploited by a remote attacker to execute arbitrary code. The affected...

CVE-2023-2809

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL command...

The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled search path element, allowing a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges using a specially created DLL file...

[SECURITY] Fedora 38 Update: libkrun-1.5.0-6.fc38

Dynamic library providing Virtualization-based process isolation capabilities...

SAMSUNG Memory Card & UFD Authentication Utility PC Software Code Issue Vulnerability

SAMSUNG Memory Card & UFD Authentication Utility PC Software is a memory card and UFD authentication utility program from SAMSUNG Korea. A security vulnerability exists in SAMSUNG Memory Card & UFD Authentication Utility PC Software prior to version 1.0.1, which stems from a DLL hijacking...

CVE-2021-41544

A vulnerability has been identified in Siemens Software Center All versions V3.0. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path...

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...

Winitor PEStudio Code Issue Vulnerability

Winitor PEStudio is an application from Winitor Inc. for discovering executables to simplify and speed up initial malware evaluation. A code issue vulnerability exists in Winitor PEStudio version v.9.52, which stems from the presence of a DLL hijacking vulnerability that can be exploited by an...

PT-2023-25620 · Pestudio · Pestudio

Name of the Vulnerable Software and Affected Versions: PEStudio version 9.52 Description: An issue in PEStudio allows a remote attacker to execute arbitrary code via a crafted DLL file to the PEStudio executable. Recommendations: For PEStudio version 9.52, consider disabling the execution of...

Exploit for CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting in the...

Keysight Technologies N6854A Geolocation server 代码问题漏洞

Keysight Technologies N6854A Geolocation server is a geolocation server from Keysight Technologies. A security vulnerability exists in Keysight Geolocation Server v2.4.2 and prior versions, which can be exploited by a low-privileged attacker to load a DLL with system privileges by creating a loca...

CVE-2023-37849

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe...

Panda Security VPN 代码问题漏洞

Panda Security VPN is a VPN software from Panda Security. A security vulnerability exists in versions prior to Panda Security VPN v15.14.8 that stems from the presence of a DLL hijacking vulnerability that allows attackers to execute arbitrary code by placing a crafted DLL file in the same...

The vulnerability of the application development environment for ISaGRAF programmable logic controllers arises from the use of an unreliable search path during the loading of dynamic libraries. This allows a hacker to execute arbitrary code.

The vulnerability in the application development environment for ISaGRAF Runtime Rockwell Automation relates to the use of an unreliable search path during the loading of dynamic libraries. Exploiting this vulnerability allows a local attacker to execute arbitrary code...

New Mockingjay Process Injection Technique Could Let Malware Evade Detection

A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to execute malicious code on compromised systems. "The injection is executed without space allocation, setting permissions or even starting a thread," Security Joes researchers...

The vulnerability of the dynamically linked CrossCadWare_x64.dl library, a toolset for design and simulation in Siemens Solid Edge, allows a hacker to disclose confidential information.

The vulnerability of the dynamically linked CrossCadWarex64.dl library, which is used for design and simulation projects by Siemens Solid Edge, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to disclose confidential informatio...

CVE-2023-28080

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains DLL Hijacking Vulnerabilities. A regular user non-admin can exploit these issues to potentially escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM...

CVE-2023-26818

Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A security vulnerability exists in Telegram versions 9.3.1, 9.4.0, which stems from a problem with the DYLDINSERTLIBRARIES flag, which can be exploited by an attacker to gain access to restricted files, microphones, or video recordings...