EUVD-2021-9549

Malicious code in bioql PyPI...

EUVD-2024-50363

Malicious code in bioql PyPI...

EUVD-2024-19763

Malicious code in bioql PyPI...

PT-2025-40303

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Graphics for Windows affected versions not specified Description The software contains a flaw in the ngfx component that could allow an attacker to perform a DLL highjacking attack. Exploitation of this issue may result in code...

CVE-2025-57624

A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs...

Cross-Site WebSocket Hijacking (CSWSH)

github.com/komari-monitor/komari is vulnerable to Cross-Site WebSocket Hijacking CSWSH. The vulnerability is due to disabled origin checking in the WebSocket upgrader, which allows an attacker to send malicious requests using a victim’s browser cookies and achieve remote code execution...

CVE-2025-30033

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component...

CVE-2025-7676

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-7427

Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2024-12168 DLL Hijacking in Yandex Telemost

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...

CVE-2024-42191

HCL Traveler for Microsoft Outlook HTMO is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content...

CVE-2024-42190

CVE-2024-42190 concerns HCL Traveler for Microsoft Outlook (HTMO) and a DLL hijacking vulnerability that could allow an attacker to modify or replace the application with malicious content. The connected documents confirm the issue is tied to DLL hijacking in HTMO, describing the potential for un...

Teltonika Remote Management System 安全漏洞

Teltonika Remote Management System is a remote management system used by Teltonika to manage Teltonika products. A security vulnerability exists in Teltonika Remote Management System versions prior to 5.7, which stems from misuse of the invite feature and could lead to account pre-hijacking...

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

CVE-2023-40732

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks...