CVE-2026-7169

a vulnerability involving an unchecked search path element in Evope Collector, versions prior to 1.1.7.13, allows a local attacker without privileges to load a malicious DLL by placing a ‘wtsapi32.dll’ file in the ‘C:\ProgramData\Evope\’ directory. The ‘Evope.Service.exe’ component, which runs wi...

CVE-2026-7169

Evope Collector versions prior to 1.1.7.13 are vulnerable to an uncontrolled search path element in the Evope.Service.exe component. Because the service runs with NT AUTHORITYSYSTEM privileges and fails to verify the integrity or origin of loaded files, a local attacker without privileges can ac...

Evope Collector 安全漏洞

Evope Collector is a team performance monitoring and task mining platform from Evope Brazil. A security vulnerability exists in Evope Collector version 1.1.6.9.0, which stems from loading the wtsapi32.dll library from an uncontrolled search path, which could lead to a local attacker executing...

PT-2025-44303

Name of the Vulnerable Software and Affected Versions Evope Collector version 1.1.6.9.0 Description A DLL hijacking issue exists in Evope Collector. The software loads the wtsapi32.dll library from an uncontrolled search path, specifically C:ProgramDataEvope. This allows a local, unprivileged...

CVE-2025-61161: Uncontrolled Search Path Element

DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path C:\ProgramData\Evope. This allows local unprivileged attackers to execute arbitrary code or escalate privileges to SYSTEM by placing a crafted DLL in that...

CVE-2025-61161

Evope Collector version 1.1.6.9.0 and related components are vulnerable to a DLL hijacking flaw. The issue arises because the Evope.Service.exe component, which runs with SYSTEM privileges , loads the wtsapi32.dll library from an uncontrolled search path located at C:\ProgramData\Evope . A local ...

GlassWire: GlassWire 2.1.167 vulnerability - MSVR 56639

Arbitrary code execution vulnerability within the firewall software, GlassWire version 2.1.167 Impact After the program is installed, on first execution, it will attempt to load Wtsapi32.dll.dll from the user's PATH without doing any checks to see if the file is signed. Attached is a demo...