DLL_Injection_On_VLC

DLL 注入与 CVE-2010-3124 概述 🌱 本项目探讨 DLL（动态链接库）注入这一主题，并特别关注 CVE-2010-3124。 CVE-2010-3124 指的是 VLC Media Player 1.1.3 及更早版本中存在的一个不受信任的搜索路径漏洞。 以下要点可帮助你更好地了解此项目： 漏洞 ：该问题源于一个不安全的搜索路径，该路径被 VLC Media Player 在加载动态链接库（DLL）时使用。 攻击场景 ：攻击者将恶意的特洛伊木马 wintab32.dll 放在 与看似无害的 .mp3 文件相同的文件夹中。 利用 ：当 VLC Media Player 尝试...

CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser 데스크톱 24.7.1.380 이전 버전은 신뢰할 수 없는 검색 경로로 인해 DLL 하이재킹 취약점이 있습니다. 취약한 브라우저 버전 !IMPORTANT 설치 중에는 인터넷을 꺼야 합니다. 그렇지 않으면 브라우저가 업데이트됩니다. 취약한 버전은 download.cdn.yandex.net에서 다운로드할 수 있습니다. 또는 아카이브에서 사용 1. YandexBrowser24.4.5.498.zip 을 다운로드하여 압축을 풉니다. 2. Setup.exe 를 실행합니다. PoC...

CVE-2024-32019-ndsudo

ndsudoの脆弱性により、攻撃者はNetdata Agentの一部であるndsudoツールにおける信頼されていない検索パスを悪用して、root権限を取得できます。これは、攻撃者が書き込み可能なディレクトリに悪意のあるバイナリを配置し、PATH環境変数を適宜変更した場合に、権限昇格された任意のプログラムの実行を可能にします。 CVE-2024-32019として識別されるndsudoの脆弱性は、Netdata Agentに含まれるndsudoツールのバージョンv1.45.0以下に影響します。この脆弱性により、攻撃者はツールがインストールされたシステム上で権限を昇格させることができます。...

CVE-2026-68492

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...

CVE-2026-68492

The Plesk control panel is affected by an untrusted search path vulnerability in versions 18.0.34 to 18.0.80.7 , 18.0.81 to 18.0.81.0 , and specifically within the Plesk RESTful API extension from version 2.4.2 to 2.4.6 . This flaw allows remote authenticated users to achieve arbitrary code execu...

CVE-2026-68492

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...

EUVD-2026-85621

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002719 advisory. Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 影響を受けるバージョン = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ 概念実証 CVE-2024-32019 — ndsudo の信頼されていない検索パス を介したローカル権限昇格 🔧 エクスプロイトのコンパイル root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 ターゲットマシンへのデプロイ 1. コンパイルしたバイナリ を脆弱なマシンに転送します。 2. 実行可能にします: root@kitploit: chmod +x nvme...

CVE-2024-50986

CVE-2024-50986: Clementine 用 DLL ハイジャックエクスプロイト 説明: Clementine v.1.3.1 の問題により、ローカルの攻撃者が細工された DLL ファイルを介して任意のコードを実行できる可能性があります。 影響を受けるバージョン: Clementine v.1.3.1 研究者: Utkarsh r1971d3 LinkedIn NIST CVE リンク: https://nvd.nist.gov/vuln/detail/CVE-2024-50986 脆弱性タイプ: 信頼できない検索パス 影響を受けるコンポーネント: QUSEREX.DLL...

CVE-2010-5230

CVE-2010-5230 MicroStation 7.1 には複数の信頼できない検索パスの脆弱性が存在し、ローカルユーザーが、現在の作業ディレクトリ内のトロイの木馬 1 mptools.dll、2 baseman.dll、3 wintab32.dll、または 4 wintab.dll ファイルを介して権限を昇格できる可能性があります。これは、.hln または .rdl ファイルを含むディレクトリによって実証されます。注: これらの詳細の一部は第三者情報から取得されています。 皆さん、こんにちは。 Windows DLL ハイジャックツールキットで遊んだ後、配管設計ソフトウェア...

EUVD-2026-74187

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS...

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

CVE-2026-92587: Untrusted Search Path

n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then invoked git with that path as its working directory; git walked up to the enclosing repository's top level and resolv...

Astra Linux – Vulnerability in Mariadb 10.3

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server up to 2021-03-03; and the wsrep patch up to 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUP...

Astra Linux – Vulnerability in Node.js

There is a vulnerability related to untrusted search paths in Node.js. Versions 19.6.1, 18.14.1, 16.19.1, and 14.21.3 may allow an attacker to search for data and potentially load ICU data when running with elevated privileges...

CVE-2026-81192

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-80159

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path through the macOS host detector command execution in HostDetector.cs. An attacker can execute arbitrary code in the application's security context by supplying a malicious ioreg binary earlier in PATH and triggerin...

EUVD-2026-74105

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...