CVE-2021-32592

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path...

New NPM library hijacks (coa and rc)

On Thursday, November 4, 2021, barely more than a week after ua-parser-js was hijacked, another popular NPM library called coa Command-Option-Argument, which is used in React packages around the world, was hijacked to distribute credential-stealing malware. The developer community noticed somethi...

AUVESY Versiondog 代码问题漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. AUVESY Versiondog has a code issue vulnerability that could be exploited by an attacker to hijack a loaded DLL...

CVE-2021-34788

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-1428

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

Western Digital Dashboard Code Issue Vulnerability

Western Digital Dashboard is a hard disk management software from Western Digital USA. The software can be used to analyze ssd including model, capacity, firmware version and smart attributes and firmware updates, and can help users take full advantage of WD SSF's software utility A security...

There is a dll hijacking vulnerability in Youdao Cloud Notes (Windows client)

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A dll hijacking vulnerability exists in Youdao Cloud Notes Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

DLL Hijacking Vulnerability in Netease Youtube Dictionary

NetEase Yudao Dictionary is an all-around free language translation software based on search engine technology produced by Guangzhou NetEase Computer System Co. A DLL hijacking vulnerability exists in Netease Youdao Dictionary, which can be exploited by attackers to gain server privileges...

Shanghai Qingman Network Technology Co., Ltd. 11 Matchmaking Platform has dll Hijacking Vulnerability

11 Matchmaking Platform is an eSports matchmaking platform developed by Gaming Network which has more than one game online matchmaking. Shanghai Qingman Network Technology Co., Ltd. 11 against the platform exists dll hijacking vulnerability, attackers can use the vulnerability in the client proce...

DLL Hijacking Vulnerability in GX Works2

GX Works2 is PLC programming software from Mitsubishi Electric, a Japanese company. GX Works2 suffers from a DLL hijacking vulnerability, which allows an attacker to construct a malicious application and place it in a specific path, causing the application to load a malicious DLL and execute it...

CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial...

Foxit PDF Compression Master DLL Hijacking Vulnerability

Foxit PDF Compression Master is a document compression software. Foxit PDF Compressor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...

Acer Quick Access DLL Hijacking Vulnerability

Acer Quick Access is an application that allows you to quickly turn on or off individual wireless devices, change power off USB charging settings. Acer Quick Access suffers from a DLL hijacking vulnerability that can be exploited by an attacker to load and execute malicious payloads using a...

CVE-2019-15628

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

Fengxing video pc client software has dll hijacking vulnerability

Fengxing Video pc client is a free video playback software, which is an integrated HD movie and TV viewing software for online viewing and downloading. Fengxing Video pc client software has a dll hijacking vulnerability, which can be exploited by attackers to inject executable DLL files and execu...

Total Defense Anti-virus Elevation of Privilege Vulnerability

Total Defense Anti-virus is a suite of antivirus software from the American company Total Defense. An elevation of privilege vulnerability exists in Total Defense Anti-virus. An attacker can exploit this vulnerability to hijack the bdcore.dll file and elevate privileges...

Adobe After Effects has a dll hijacking vulnerability

Adobe After Effects abbreviation "AE" is a graphic video processing software launched by Adobe. Adobe After Effects has a dll hijacking vulnerability when processing aep project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-3587

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder...

Adobe Flash Player Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to elevate...

SUPERAntiSpyware Professional Trial Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SUPERAntiSpyware.exe file in SUPERAntiSpyware Professional Trial version 6.0.1254. An attacker can exploit this...