4021 matches found
DLL_Injection_On_VLC
DLL 注入与 CVE-2010-3124 概述 🌱 本项目探讨 DLL（动态链接库）注入这一主题，并特别关注 CVE-2010-3124。 CVE-2010-3124 指的是 VLC Media Player 1.1.3 及更早版本中存在的一个不受信任的搜索路径漏洞。 以下要点可帮助你更好地了解此项目： 漏洞 ：该问题源于一个不安全的搜索路径，该路径被 VLC Media Player 在加载动态链接库（DLL）时使用。 攻击场景 ：攻击者将恶意的特洛伊木马 wintab32.dll 放在 与看似无害的 .mp3 文件相同的文件夹中。 利用 ：当 VLC Media Player 尝试...
CVE-2024-32019-POC
⚠️ CVE-2024-32019 - 概念验证 📌 受影响版本 = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ 概念验证 CVE-2024-32019 — ndsudo 本地权限提升通过不受信任的搜索路径 。 🔧 编译漏洞利用代码 root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 部署到目标机器 1. 将编译好的二进制文件 传输到易受攻击的机器上。 2. 使其可执行： root@kitploit: chmod +x nvme 3. 通过 PATH...
CVE-2024-50986
CVE-2024-50986：Clementine 的 DLL 劫持漏洞利用 描述： Clementine v.1.3.1 中的一个问题允许本地攻击者通过精心构造的 DLL 文件执行任意代码。 受影响版本： Clementine v.1.3.1 研究人员： Utkarsh r1971d3 LinkedIn NIST CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2024-50986 漏洞类型： 不受信任的搜索路径 受影响组件： QUSEREX.DLL 概念验证利用 攻击向量 为了利用此漏洞，攻击者需要构造一个名为 QUSEREX.DLL 的恶意...
CVE-2010-5230
CVE-2010-5230 MicroStation 7.1 中存在多个不可信搜索路径漏洞，本地用户可通过在当前工作目录中放置特洛伊木马文件 1 mptools.dll、2 baseman.dll、3 wintab32.dll 或 4 wintab.dll 来提升权限，如通过包含 .hln 或 .rdl 文件的目录所演示。注意：部分细节来自第三方信息。 大家好， 在玩 Windows DLL 劫持工具包后，我获得了管道设计软件 Bentaly Microstation 7.1、Nero 8.2.8.0、Quicktime pictureviwer 7.6.5 的漏洞利用 POC。...
CVE-2024-6473-PoC
CVE-2024-6473 PoC Yandex Browser 桌面版（24.7.1.380 之前版本）存在 DLL Hijacking 漏洞，因为使用了不受信任的搜索路径。 有漏洞的浏览器版本 !IMPORTANT 安装过程中必须关闭互联网，否则浏览器会自动更新。 你可以从 download.cdn.yandex.net 下载有漏洞的版本 或者使用压缩包安装 1. 下载并解压 YandexBrowser24.4.5.498.zip 2. 运行 Setup.exe PoC 我使用了来自 https://github.com/advancedmonitoring/ProxyDll 的...
CVE-2024-32019-ndsudo
La vulnerabilidad ndsudo permite a un atacante obtener permisos de root explotando una ruta de búsqueda no confiable en la herramienta ndsudo, que forma parte del Netdata Agent. Esto puede permitir la ejecución de programas arbitrarios con privilegios elevados si el atacante coloca un binario...
EUVD-2026-74187
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS...
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...
Astra Linux – Vulnerability in Mariadb 10.3
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server up to 2021-03-03; and the wsrep patch up to 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUP...
CVE-2026-81192
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-80159
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
Untrusted Search Path
Overview Affected versions of this package are vulnerable to Untrusted Search Path through the macOS host detector command execution in HostDetector.cs. An attacker can execute arbitrary code in the application's security context by supplying a malicious ioreg binary earlier in PATH and triggerin...
EUVD-2026-74105
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-80159
Acrobat Reader is affected by an Untrusted Search Path vulnerability (CWE-426 ) that could lead to privilege escalation . An attacker with high privileges could exploit this to gain elevated access, though exploitation requires user interaction (opening a malicious file) and depends on conditions...
CVE-2026-80159 Acrobat Reader | Untrusted Search Path (CWE-426)
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-81192
CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...