CVE-2020-27154

The chat window of Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user...

Mitel BusinessCTI Enterprise Client Input Validation Error Vulnerability

Mitel Networks BusinessCTI Enterprise is an employee communication software for attendance management and instant messaging from Mitel Networks Canada. An input validation error vulnerability exists in the Windows-based Mitel BusinessCTI Enterprise MBC-E Client Chat Window versions prior to 6.4.1...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...

Sogou Input Method (Windows client) suffers from dll hijacking vulnerability

Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...

There is a dll hijacking vulnerability in Youdao Cloud Notes (Windows client)

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A dll hijacking vulnerability exists in Youdao Cloud Notes Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Qiyou Gaming Accelerator (Windows Client) has dll hijacking vulnerability

Qiyou Gaming Accelerator is a professional gaming-grade online game gas pedal. A dll hijacking vulnerability exists in Qiyou Gaming Accelerator Windows client. An attacker can exploit this vulnerability to execute malicious code...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

Druva inSync Windows Client 6.6.3 Privilege Escalation

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Date: 2020-12-03 Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6....

2345 Viewer windows client has dll hijacking vulnerability

2345 Viewer is one of the more common viewer programs with a high popularity rate. There is a dll hijacking vulnerability in the windows client of 2345 Viewer, which can be exploited by attackers to load malicious dlls and execute malicious code...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Date: 2020-12-03 Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6....

Three Kingdoms Online (Windows Client) suffers from dll hijacking vulnerability

Three Kingdoms Online is a card game. Three Kingdoms Kill Online Windows client suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) Exploit

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6.3 Tested on:...

Cool Music (Windows client) suffers from a dll hijacking vulnerability

Cool Music is a music player that serves songs to its users. A dll hijacking vulnerability exists in CoolMusic Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Cool Music (Windows client) suffers from a dll hijacking vulnerability (CNVD-2020-72476)

Cool Music is a music player that serves songs to its users. A dll hijacking vulnerability exists in CoolMusic Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

360 Kids Desktop (Windows client) suffers from dll hijacking vulnerability

360 Kids Desktop is the children's version of 360 Safe Desktop, which is a safe Internet assistance software launched by Qihoo 360 specifically for kids. 360 Kids Desktop Windows client has a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...

Lovecraft Universal Link (Windows client) suffers from dll hijacking vulnerability

Aqiyi Universal Link formerly Aqiyi Universal Player is a universal video and audio player produced by Aqiyi in pursuit of the ultimate experience. There is a dll hijacking vulnerability in Aqiyi Universal Media Player Windows client. An attacker can exploit this vulnerability to load a malicious...

360 Free Wi-Fi (Windows client) suffers from dll hijacking vulnerability

360 Free WiFi is a free and extremely simple to operate WiFi sharing software, just run the software, you can instantly turn the networked computer into a free WiFi router, thus allowing cell phones, PADs and other hardware devices to access the Internet for free, network sharing, and you can...

NetEase Mail Master (Windows Client) suffers from dll hijacking vulnerability

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports all-platform device login. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An attacker...