Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

Ape Tutoring (Windows client) suffers from a dll hijacking vulnerability

Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. Ape Tutoring Windows client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4661-1 advisory. It was discovered that Snapcraft includes the current directory when configuring LDLIBRARYPATH for application commands. If a user were tricked into...

USN-4661-1 snapcraft vulnerability

It was discovered that Snapcraft includes the current directory when configuring LDLIBRARYPATH for application commands. If a user were tricked into installing a malicious snap or downloading a malicious library, under certain circumstances an attacker could exploit this to affect strict mode sna...

Adobe After Effects has a dll hijacking vulnerability (CNVD-2020-69406)

Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. A dll hijacking vulnerability exists in Adobe After Effects. An attacker can exploit this vulnerability to load a maliciou...

CVE-2020-27695

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrative privileges during the installation of the product...

Cyclone PDF is vulnerable to DLL hijacking

Cyclone PDF is a PDF reading tool. Cyclone PDF has a DLL hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

DLL Hijacking Vulnerability in WPS Office Campus Edition (CNVD-2020-51405)

WPS Office Campus is a lifetime free office software for teachers and students. WPS Office Campus Edition suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious DLL...

Python code issue vulnerability (CNVD-2020-53314)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in Python Windows that stems from python3X.dll using an invalid search...

DLL Hijacking Vulnerability in SamSoarII of Shenzhen Xianzhong Technology Co.

Shenzhen XianControl Technology is a high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. Ltd. SamSoarII has a DLL hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute maliciou...

CVE-2020-9847

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox...

DLL Hijacking Vulnerability in Xunlei Video

Xunlei Video is a product of Xunlei company a video and audio playback software. Xunlei Video has a DLL hijacking vulnerability that can be exploited by attackers to load a malicious DLL and execute arbitrary code...

Schneider Electric Limited CET850 suffers from a dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France. A dll hijacking vulnerability exists in Schneider Electric SA CET850, which can be exploited by an attacker to load a malicious dll and execute malicious code...

Malwarebytes AdwCleaner Code Issue Vulnerability (CNVD-2020-23411)

Malwarebytes AdwCleaner is a utility program from the American company Malwarebytes. The program is mainly used to scan and remove pre-installed software such as advertisements from Windows computers. A code issue vulnerability exists in Malwarebytes AdwCleaner version 8.0.3. The vulnerability ca...

DLL Hijacking Vulnerability in GX Works2

GX Works2 is PLC programming software from Mitsubishi Electric, a Japanese company. GX Works2 suffers from a DLL hijacking vulnerability, which allows an attacker to construct a malicious application and place it in a specific path, causing the application to load a malicious DLL and execute it...

DLL Hijacking Vulnerability in IceAssistant PC Version

Ice Assistant is a professional Apple cell phone management assistant. There is a DLL hijacking vulnerability in IceAssistant PC version, which can be exploited by attackers to execute malicious DLL files...

CVE-2019-18979

Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...