YY Voice (Windows client) suffers from dll hijacking vulnerability

YY Voice is a team voice communication platform. A dll hijacking vulnerability exists in YY Voice Windows client. An attacker can exploit this vulnerability to execute malicious code...

Extreme PDF Reader (Windows Client) has a dll hijacking vulnerability

Extreme PDF Reader is a PDF reader. Extreme PDF Reader Windows client has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Denial of Service Vulnerability in Time Stamp (Windows Client)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Denial of Service Vulnerability in Time Stamp (Windows Client) (CNVD-2020-75029)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Elevation of Privilege Vulnerability in the Windows Client of Night God Emulator

Night God Emulator is a completely free software. An elevation of privilege vulnerability exists in the Windows client of NightGod Emulator, which can be exploited by an attacker to gain control of the server...

Security Bulletin: Security vulnerability in IBM Java SDK affecting Rational Synergy (CVE-2019-4732)

Summary There is a security vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55 used by Rational Synergy versions 7.2.1.0 to 7.2.1.7. Rational Synergy has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732...

Format Factory (Windows client) suffers from a dll hijacking vulnerability

Format Factory is a free multifunctional multimedia format conversion software. A dll hijacking vulnerability exists in Format Factory Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2020-27154

The chat window of Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user...

Mitel BusinessCTI Enterprise Client Input Validation Error Vulnerability

Mitel Networks BusinessCTI Enterprise is an employee communication software for attendance management and instant messaging from Mitel Networks Canada. An input validation error vulnerability exists in the Windows-based Mitel BusinessCTI Enterprise MBC-E Client Chat Window versions prior to 6.4.1...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...

Sogou Input Method (Windows client) suffers from dll hijacking vulnerability

Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...

Qiyou Gaming Accelerator (Windows Client) has dll hijacking vulnerability

Qiyou Gaming Accelerator is a professional gaming-grade online game gas pedal. A dll hijacking vulnerability exists in Qiyou Gaming Accelerator Windows client. An attacker can exploit this vulnerability to execute malicious code...

There is a dll hijacking vulnerability in Youdao Cloud Notes (Windows client)

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A dll hijacking vulnerability exists in Youdao Cloud Notes Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

Druva inSync Windows Client 6.6.3 Privilege Escalation

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Date: 2020-12-03 Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6....

2345 Viewer windows client has dll hijacking vulnerability

2345 Viewer is one of the more common viewer programs with a high popularity rate. There is a dll hijacking vulnerability in the windows client of 2345 Viewer, which can be exploited by attackers to load malicious dlls and execute malicious code...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Date: 2020-12-03 Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6....

Three Kingdoms Online (Windows Client) suffers from dll hijacking vulnerability

Three Kingdoms Online is a card game. Three Kingdoms Kill Online Windows client suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) Exploit

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6.3 Tested on:...