Windows Time Provider Persistence

This Metasploit module establishes persistence by registering a malicious Time Provider DLL under HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders. When the W32Time service starts or restarts, the configured payload DLL is executed...

CVE-2020-7474

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 H module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL...

CVE-2024-2658

A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 11.19.6.0 allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted...

EUVD-2019-2685

Malware in sbrugna...

EUVD-2019-16379

Malware in sbrugna...

EUVD-2021-21256

Malware in sbrugna...

CVE-2013-10046

A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting ...

CVE-2025-48825

The CVE-2025-48825 affects Ricoh Streamline NX V3 PC Client, versions 3.5.0–3.7.0. The issue is use of a less trusted source, enabling a local-MITM attacker to eavesdrop upgrade requests and execute a malicious DLL with custom code. Impact is limited to scenarios where an attacker can position th...

CVE-2019-10971

The application Network Configurator for DeviceNet Safety 3.41 and prior searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories...

CVE-2022-41667

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfi...

PT-2019-6166

Name of the Vulnerable Software and Affected Versions SafeNet Sentinel LDK License Manager versions prior to 7.101 Description The issue is related to incorrect link resolution before file access, allowing an attacker with local access to create, write, and/or delete files in system folders using...

PT-2019-12111

Name of the Vulnerable Software and Affected Versions Network Configurator for DeviceNet Safety versions 3.41 and prior Description The application searches for resources by means of an untrusted search path, which could lead to the execution of a malicious .dll file not under the application's...

CVE-2019-10971: Untrusted Search Path

The application Network Configurator for DeviceNet Safety 3.41 and prior searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories...

PT-2018-16826

Name of the Vulnerable Software and Affected Versions Norton Utilities versions prior to 16.0.3.44 Description The issue is related to a DLL Preloading vulnerability. This type of vulnerability occurs when an application looks to call a DLL for execution and an attacker provides a malicious DLL t...