PT-2025-3722 · Unknown · Usbxpress 4 Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress 4 SDK affected versions not specified Description: The issue is related to DLL hijacking vulnerabilities caused by an uncontrolled search path in the USBXpress 4 SDK installer. This can lead to privilege escalation and arbitrary cod...

PT-2025-3719 · Silicon · Cp210 Vcp Win 2K Installer

Name of the Vulnerable Software and Affected Versions: CP210 VCP Win 2k installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...

PT-2025-2972 · Itop Vpn · Itop Vpn

Name of the Vulnerable Software and Affected Versions: iTop VPN version 16.0 Description: A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file into the path ProgramDataiTop VPNDownloadervpn6. This enables attackers to trick iTop VPN into loading a fake DL...

CVE-2024-13404

The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-13404

The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-13404

CVE-2024-13404 concerns the WordPress Link Library plugin. Affected: Link Library (WordPress) up to version 7.7.2. Issue: Reflected Cross-Site Scripting via the searchll parameter caused by insufficient input sanitization and output escaping. Impact: unauthenticated attackers could inject web scr...

CVE-2024-13404 Link Library <= 7.7.2 - Reflected Cross-Site Scripting

The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

WordPress Link Library plugin <= 7.7.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Link Library versions = 7.7.2...

PT-2025-2159 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library plugin for WordPress versions up to, and including, 7.7.2 Description: The issue is related to Reflected Cross-Site Scripting via the searchll parameter due to insufficient input sanitization and output escaping. This allows...

WordPress plugin Link Library 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

PT-2026-3639

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Systems for Windows affected versions not specified Description The application has a flaw in how it loads DLLs, specifically related to insecure DLL search paths. This could allow an attacker to manipulate the search path,...

The vulnerability of the Veritas NetBackup software for backup and data restoration operations, related to an uncontrolled search path element, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the Veritas NetBackup backup and recovery software relates to an uncontrolled element of the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands by loading malicious DLL libraries...

APSB24-106 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses a critical vulnerability with a single Dynamic Link Library DLL on the Windows platform. Successful exploitation could lead to arbitrary code execution...

SAP Lifecycle Costing Client 代码问题漏洞

SAP Lifecycle Costing Client is a product lifecycle costing software from SAP, Germany. A code issue vulnerability exists in SAP Lifecycle Costing Client versions prior to 4.7.1, which stems from the presence of a DLL substitution vulnerability that could lead to the theft of sensitive informatio...

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric of Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system Mitsubishi Electric GENESIS64 is a SCADA kit. A code issue vulnerability...

CVE-2024-52959

A Improper Control of Generation of Code 'Code Injection' vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file...

Galaxy Software Services iota C.ai Conversational Platform 数据伪造问题漏洞

Galaxy Software Services iota C.ai Conversational Platform is an intelligent AI conversational platform from Galaxy Software Services China. A data forgery vulnerability exists in Galaxy Software Services iota C.ai Conversational Platform versions 1.0.0 through 2.1.3, which stems from an improper...

Galaxy Software Services iota C.ai Conversational Platform 代码注入漏洞

Galaxy Software Services iota C.ai Conversational Platform is an intelligent AI conversational platform from Galaxy Software Services China. A code injection vulnerability exists in Galaxy Software Services iota C.ai Conversational Platform versions 1.0.0 through 2.1.3, which stems from a code...