PT-2025-4025 · Postman · Postman

Name of the Vulnerable Software and Affected Versions: Postman versions up to 11.20 Description: A problematic issue has been found in Postman on Windows, affecting an unknown part of the library file profapi.dll. The manipulation leads to an untrusted search path. The attack must be approached...

Discord 代码问题漏洞

Discord is a free chat service from Discord, Inc. A code issue vulnerability exists in Discord version 1.0.9177 and prior versions that stems from an untrusted search path...

CVE-2025-0707

A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally...

CVE-2025-0707 Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path

A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally...

CVE-2025-0707

Rise Group Rise Mode Temp CPU 2.1 is affected by a vulnerability in the CRYPTBASE.dll component within Startup that enables an untrusted search path when exploited locally. The issue is described across multiple sources (including PT-2025-4016 and Red Hat/NVD entries) as a critical, local attack ...

CVE-2025-0707 Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path

A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally...

CVE-2024-9496

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498

CVE-2024-9498 affects the USBXpress SDK installer, where an uncontrolled search path enables DLL hijacking. This can lead to privilege escalation and arbitrary code execution when the impacted installer runs. Exploitation details are not provided in the connected documents. Remediation/fix detail...

CVE-2024-9494

CVE-2024-9494 concerns a DLL hijacking vulnerability in the CP210 VCP Win 2k installer caused by an uncontrolled search path. The affected component is the installer for Silicon CP210 VCP Win 2k, with impact described as privilege escalation and arbitrary code execution when running the impacted ...

CVE-2024-9493 Uncontrolled search path can lead to DLL hijacking in ToolStick installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

Silicon Configuration Wizard 2 installer 代码问题漏洞

Silicon Configuration Wizard 2 installer is a Configuration Wizard 2 installer from Silicon Corporation. A security vulnerability exists in the Silicon Configuration Wizard 2 installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

Silicon CP210 VCP Win 2k installer 代码问题漏洞

Silicon CP210 VCP Win 2k installer is a CP210 VCP Win 2k installer from Silicon. A security vulnerability exists in the Silicon CP210 VCP Win 2k installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon USBXpress Dev Kit installer 代码问题漏洞

Silicon USBXpress Dev Kit installer is a USBXpress Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary...

Silicon USBXpress 4 SDK installer 代码问题漏洞

Silicon USBXpress 4 SDK installer is a USBXpress 4 SDK installer from Silicon. A security vulnerability exists in the Silicon USBXpress 4 SDK installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon ToolStick installer 代码问题漏洞

Silicon ToolStick installer is a ToolStick installer from Silicon Corporation. A security vulnerability exists in Silicon ToolStick installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

Silicon IDE installer 代码问题漏洞

Silicon IDE installer is a development program installer from Silicon Corporation. A security vulnerability exists in Silicon IDE installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

PT-2025-3716 · Unknown · Configuration Wizard 2

Name of the Vulnerable Software and Affected Versions: Configuration Wizard 2 affected versions not specified Description: The issue is caused by an uncontrolled search path in the Configuration Wizard 2 installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation...

Silicon USBXpress Win 98SE Dev Kit installer 代码问题漏洞

Silicon USBXpress Win 98SE Dev Kit installer is a USBXpress Win 98SE Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Win 98SE Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate...

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...