CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

Buffer overflow

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-34788: Time-of-check Time-of-use (TOCTOU) Race Condition

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-26750

DLL hijacking in Panda Agent =1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 = 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file...

The vulnerability of the TrustAccess network firewall, related to deficiencies in information protection mechanisms, allows attackers to perform privileged operations.

The vulnerability of TrustAccess is related to deficiencies in information protection mechanisms. Exploiting this vulnerability allows a perpetrator with access to the directory where TrustAccess is installed to perform privileged operations through a DLL hijacking attack. This is achieved by...

TIETEN Acronis Cyber Protect代码问题漏洞

TIETEN Acronis Cyber Protect is an application from TIETEN Acronis Cyber Protect TIETEN, China. provides the ability to unify your network protection by integrating backup, disaster recovery, AI-based malware protection, remote assistance, and security into a single, reliable tool. A security...

CVE-2021-38571

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

CVE-2021-32580

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

VMware Thinapp 代码问题漏洞

VMware Thinapp is a suite of application virtualization and portable application creators from Vmware USA that packages regular applications to make them portable. VMware Thinapp A code issue vulnerability exists that stems from VMware Thinapp versions prior to 5.2.10 contain a DLL hijacking...

CVE-2021-22921

Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PAT...

Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows that could allow an...

Cisco Advanced Malware Protection for Endpoints Windows Connector ClamAV for Windows and Immunet DLL Hijacking Vulnerability

...

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

Scintillating Light PDF Converter is vulnerable to dll hijacking.

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. There is a dll hijacking vulnerability in Scintillate PDF Converter. An...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

Homework Help Live Classes for windows has dll hijacking vulnerability

Homework Help Live Classes is a high-quality online live tutoring product under Homework Help, which covers all subjects of primary, junior high and senior high school grades. There is a dll hijacking vulnerability in the windows version of Homework Help Live Class. Attackers can use this...

MangoTV PC client suffers from dll hijacking vulnerability

Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...

Lovecraft pc client suffers from dll hijacking vulnerability

Aqiyi pc client is a client software that focuses on video playback under Aqiyi. There is a dll hijacking vulnerability in Aqiyi pc client, which can be exploited by attackers to execute arbitrary commands...

Nail (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-72473)

Nail is an intelligent mobile office platform. A dll hijacking vulnerability exists in Nail Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...