Command Execution Vulnerability in Toastmaster pc Client Software

Toastmaster is a Windows computer desktop sticky notes software, with multi-end data cloud synchronization Windows/iPhone/Android/Web. A command execution vulnerability exists in the Toastmaster pc client software, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Followers (Windows Client)

Beijing Hundred Technology Group Limited is an Internet education technology company. A command execution vulnerability exists in Followers Windows client, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Tencent Classroom (Windows Client)

Tencent Classroom is a professional online education platform launched by Tencent. A command execution vulnerability exists in Tencent Classroom Windows client. An attacker can exploit the vulnerability to execute arbitrary commands...

Command Execution Vulnerability in Followers (Windows Client)

Followers Learning, which is affiliated with Beijing Baike Internet Technology Co. The program services provided by Followers Learning cover the categories of primary and secondary school culture classes, practical English, workplace, certification, study abroad, graduate school, family education...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Code injection

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Nord Security: Possible RCE through Windows Custom Protocol on Windows client

Summary: The NordVPN windows client application registered two custom protocols NordVPN: and NordVPN.Notification: for process communication. This makes us are able to communicate with NordVPN.exe from web browser. After looking the executable binary, I noticed the class...

CVE-2020-7299 Sensitive Data Exposure vulnerability in McAfee True Key Windows Client

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...

CVE-2020-3541

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe loggin...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Code injection

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160

The CVE-2020-24160 entry involves Shenzhen Tencent TIM Windows client 3.0.0.21315 and a DLL hijacking vulnerability that could allow a local attacker to execute arbitrary code. The available documents identify the vulnerability class (DLL hijack) and the affected product/version, but do not provi...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-3433

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows...

CVE-2020-9767

A vulnerability related to Dynamic-link Library “DLL” loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed...

Cisco AnyConnect Secure Mobility Client for Windows Code Issue Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. A code issue vulnerability exists in the IPC channel in Cisco AnyConnect Secure Mobility Client for Windows prior to...

PT-2020-4217 · Cisco · Cisco Anyconnect Secure Mobility Client

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to perform a DLL hijacking attack. The...

SonicWall NetExtender arbitrary file write vulnerability

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. CVE: CVE-2020-5131 Last updated: July 16, 2020, 9:01 a.m...

Microsoft OneDrive 19.232.1124.0010 DLL Hijacking

------------------------------------------------------------------------ Microsoft OneDrive client for Windows Qt QML module hijack ------------------------------------------------------------------------ Yorick Koster, July 2020...