Command Execution Vulnerability in Perfect Game Platform (Windows Client)

Perfect Game Platform is a game platform created by Perfect that integrates account, game, and service, and includes all of Perfect's end-game and page games. A command execution vulnerability exists in Perfect Game Platform Windows client, which can be exploited by an attacker to gain control of...

Command Execution Vulnerability in Cool Music (Windows Client)

Cool Music is a music player that serves songs to its users. A command execution vulnerability exists in CoolMusic Windows client, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in GoLink (Windows Client)

GoLink is a software dedicated to providing quality network acceleration services. A command execution vulnerability exists in GoLink Windows client. An attacker can exploit the vulnerability to execute commands and gain server privileges...

Bubble Accelerator (Windows Client) Command Execution Vulnerability

Bubble Accelerator is an acceleration tool for games. Bubble Accelerator Windows client A command execution vulnerability exists. An attacker can exploit the vulnerability to remotely execute commands and gain server privileges...

Command Execution Vulnerability in Toastmaster pc Client Software

Toastmaster is a Windows computer desktop sticky notes software, with multi-end data cloud synchronization Windows/iPhone/Android/Web. A command execution vulnerability exists in the Toastmaster pc client software, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Followers (Windows Client)

Beijing Hundred Technology Group Limited is an Internet education technology company. A command execution vulnerability exists in Followers Windows client, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Tencent Classroom (Windows Client)

Tencent Classroom is a professional online education platform launched by Tencent. A command execution vulnerability exists in Tencent Classroom Windows client. An attacker can exploit the vulnerability to execute arbitrary commands...

Command Execution Vulnerability in Followers (Windows Client)

Followers Learning, which is affiliated with Beijing Baike Internet Technology Co. The program services provided by Followers Learning cover the categories of primary and secondary school culture classes, practical English, workplace, certification, study abroad, graduate school, family education...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Code injection

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Nord Security: Possible RCE through Windows Custom Protocol on Windows client

Summary: The NordVPN windows client application registered two custom protocols NordVPN: and NordVPN.Notification: for process communication. This makes us are able to communicate with NordVPN.exe from web browser. After looking the executable binary, I noticed the class...

CVE-2020-7299 Sensitive Data Exposure vulnerability in McAfee True Key Windows Client

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...

CVE-2020-3541

A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to gain access to sensitive information. The vulnerability is due to unsafe loggin...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Code injection

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160

The CVE-2020-24160 entry involves Shenzhen Tencent TIM Windows client 3.0.0.21315 and a DLL hijacking vulnerability that could allow a local attacker to execute arbitrary code. The available documents identify the vulnerability class (DLL hijack) and the affected product/version, but do not provi...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160: Uncontrolled Search Path Element

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-3433

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows...