Kinco KINCOHUIXINPLUGIN suffers from dll hijacking vulnerability

Shanghai BUCO Automation Co., Ltd. is a private high-tech enterprise engaged in the research, development and production of automation products. Kinco KINCOHUIXINPLUGIN suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Hopscotch MagicWorks HMI wintab32 suffers from dll hijacking vulnerability

Shenzhen Hexin Automation Technology Co., Ltd. is a company that mainly deals with items such as PLC, HMI, servo, special control system, remote I/O and field network products. Hopsin MagicWorks HMI wintab32 has a dll hijacking vulnerability that can be exploited by attackers to execute malicious...

dll hijacking vulnerability exists in state god dwmapi

Nanjing New Dixon Software Technology Co., Ltd. is a company mainly engaged in computer software and hardware technology development, sales, installation, technical consulting, technical services; computer system integration; network engineering and other projects. There is a dll hijacking...

McAfee Total Protection DLL Search Order Hijacking Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Microsoft Windows client in versions prior to McAfee MTP 16.0.18. An attacker could exploit the vulnerability to execute arbitrary code...

Sublime Text 3 v3.1.1 build 3176 suffers from DLL hijacking vulnerability

Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A DLL hijacking vulnerability exists in Sublime Text 3 v3.1.1 build 3176. An attacker can exploit this vulnerability to elevate privileges...

CVE-2018-20211

ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws3232.dll file into this new folder, aka DLL Hijacking. NOTE: 8.32 is an obsolete version from 2010 9.x was released starti...

CVE-2018-14812

An uncontrolled search path element DLL Hijacking vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that...

CVE-2018-15976

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-15974

Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-8090

Quick Heal Total Security 64 bit 17.00 QHTS64.exe, QHTSFT64.exe - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 QHTS32.exe, QHTSFT32.exe - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 QHIS64.exe, QHISFT64.exe - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17....

ruby-ffi DLL Hijacking Vulnerability

ruby-ffi is a Ruby extension that programmatically loads dynamic libraries, binds functions, and calls them from Ruby code. A security vulnerability exists in ruby-ffi. An attacker can exploit this vulnerability to hijack a DLL...

CVE-2018-7884

An issue was discovered in DisplayLink Core Software Cleaner Application 8.2.1956. When the drivers are updated to a newer version, the product launches a process as SYSTEM to uninstall the old version: cl1956.exe is run as SYSTEM on the %systemroot%\Temp folder, where any user can write a DLL...

CVE-2018-11551

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly...

Format Factory DLL Hijacking Vulnerability

Format Factory is a format conversion tool from the Chinese company Format Factory Network Format Factory Network. The program supports converting various types of audio, video and image files to the target format files. Format Factory version 4.1.0 has a DLL hijacking vulnerability in the...

CVE-2018-6306

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538...

CVE-2018-1435

IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563...

CVE-2018-1437

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM...

CVE-2018-6218

A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module UMH could allow an attacker to run arbitrary code on a vulnerable system...

CVE-2018-6318

In Sophos Tester Tool 3.2.0.7 Beta, the driver loads in the context of the application used to test an exploit or ransomware the DLL using a payload that runs from NTDLL.DLL so, it's run in userland, but the driver doesn't perform any validation of this DLL not its signature, not its hash, etc.. ...