Foxit PhantomPDF code issue vulnerability (CNVD-2020-32465)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. A remote attacker can exploit this vulnerability to execute code via a DLL...

Unspecified Vulnerability in Foxit Studio

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo versions prior to 3.6.6.922. The vulnerability can be exploited by a local attacker to gain privileges via a specially crafted DLL file in the current...

CVE-2018-21241

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...

CVE-2020-13812

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...

Raonwiz K Upload Parameter Injection Vulnerability

Raonwiz K Upload is a file transfer component from the Korean company Raonwiz. A security vulnerability exists in RAONWIZ K Upload 2018.0.2.51 and earlier versions. An attacker can use the vulnerability to modify parameters, download arbitrary DLL files and perform injection operations...

CVE-2020-7808

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update moduleweb.js allows an attacker to modify arguments which causes downloading a random DLL and injection on it...

Opto 22 SoftPAC Project Code Issue Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A code issue vulnerability exists in Opto 22 SoftPAC Project 9.6 and...

A4Tech 8-in-one software suffers from dll hijacking vulnerability

Headquartered in Taipei, Taiwan, A4Tech is an independent brand in the computer field and has successfully established sales channels in the global market. A4Tech 8-in-one software suffers from a dll hijacking vulnerability. An attacker can execute arbitrary code by replacing a dll with the same...

Accusoft ImageGear Input Validation Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. An input validation error vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library in Accusoft ImageGear versions 19.4, 19.5, and 19.6. An attacker can exploit the vulnerabilit...

DLL Hijacking Vulnerability in 360 Extreme Browser

360 Extreme Browser is a dual-core browser owned by Beijing Qihoo Technology Co. 360 Extreme Browser suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in NetEase Email Master for Windows Edition

NetEase Email Master is an email client that supports multiple platforms. A DLL hijacking vulnerability exists in NetEase Mail Master for Windows, which can be exploited by attackers to execute malicious code...

PT-2020-19607

Name of the Vulnerable Software and Affected Versions EcoStruxure Machine Expert – Basic or SoMachine Basic programming software affected versions not specified Description A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' issue exists, whi...

Zijin Bridge Monitoring and Configuration Software 6.5 DLL Hijacking Vulnerability

Zijinqiao monitoring and configuration software is an industrial automation monitoring and configuration software developed by Daqing Zijinqiao Software Technology Company, which is funded by PetroChina. A DLL hijacking vulnerability exists in Zijinqiao Monitoring and Configuration Software 6.5,...

Shenzhen Tencent Computer System Limited Tencent Online Game Accelerator suffers from DLL hijacking vulnerability

Tencent online game gas pedal is by an online game gas pedal tool. Shenzhen Tencent Computer Systems Limited Tencent online game gas pedal DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

Sichuan Xunyou Network Technology Co., Ltd. Xunyou Online Game Accelerator DLL Hijacking Vulnerability

XunYou Online Game Accelerator is a specialized acceleration software for online games. Sichuan Xunyou Network Technology Co., Ltd Xunyou online game gas pedal dll hijacking vulnerability, attackers can use the loophole in the client process to inject executable DLL file, the execution of arbitra...

DLL hijacking vulnerability in Dolphin Online Game Accelerator of Xiamen Xiangyou Network Technology Co.

Dolphin Online Game Accelerator is an online game acceleration software. Dolphin Online Game Accelerator has a DLL hijacking vulnerability, which can be exploited by attackers to inject executable DLL files into client processes to perform arbitrary functions...

Wuhan No. No. Technology Co. 99box Game Manager suffers from dll hijacking vulnerability

99box is a very cool gaming service platform. Wuhan No. 99box Game Manager Co., Ltd. has a dll hijacking vulnerability that can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

There is a dll hijacking vulnerability in Youdao Dictionary

Youdao Dictionary is an all-around free language translation software based on search engine technology produced by NetEase Youdao. There is a dll hijacking vulnerability in Youdao Dictionary, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Big Research Insider Edition has a dll hijacking vulnerability

Big Research Insider Edition is a stock speculation software. Big Research Insider Edition suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Tiger's tooth PC client has dll hijacking vulnerability

Tiger Tooth PC client is Tiger Tooth live official for the audience to provide a computer client, Tiger Tooth live is a game live mainly pop-up interactive live platform Tiger Tooth PC client dll hijacking vulnerability, attackers can use the vulnerability to load malicious dll, the execution of...