CVE-2024-7325

CVE-2024-7325 affects IObit Driver Booster 11.0.0.0. The issue is in the VCL120.BPL library of the BPL Handler, causing an uncontrolled search path when manipulated. Local access is required for exploitation. Impact is described as high for confidentiality, integrity, and availability. Multiple s...

CVE-2024-7325 IObit Driver Booster BPL VCL120.BPL uncontrolled search path

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The...

CVE-2024-7324 IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...

PT-2024-38268 · Iobit · Iobit Driver Booster

Name of the Vulnerable Software and Affected Versions: IObit Driver Booster version 11.0.0.0 Description: A critical issue affects some unknown functionality in the library VCL120.BPL of the component BPL Handler, leading to an uncontrolled search path. The manipulation requires a local attack. T...

PT-2024-5613 · Iobit · Iobit Itop Data Recovery Pro

Name of the Vulnerable Software and Affected Versions: IObit iTop Data Recovery Pro version 4.4.0.687 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit iTop Data Recovery Pro. This can be exploited to execute arbitrary commands. Loc...

PT-2024-5611 · Iobit · Iobit Dualsafe Password Manager

Name of the Vulnerable Software and Affected Versions: IObit DualSafe Password Manager version 1.4.0.3 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit DualSafe Password Manager. This could allow an attacker to execute arbitrary...

IObit Driver Booster 代码问题漏洞

IObit Driver Booster is a driver updater from IObit. A code issue vulnerability exists in IObit Driver Booster version 11.0.0.0, which stems from an unknown operation in the VCL120.BPL library that can lead to uncontrolled search paths...

CVE-2024-7324: Uncontrolled Search Path Element

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...

CVE-2024-7325: Uncontrolled Search Path Element

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The...

CVE-2024-7326: Uncontrolled Search Path Element

A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the library RTL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

bpl-graf.de Improper Access Control vulnerability OBB-3768158

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Frigate 3.36.0.9 Local Buffer Overflow

Exploit Title: Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow SEH PoC Vendor Homepage: http://www.frigate3.com/ Software Link Download: http://www.frigate3.com/download/frigate3pro.exe Exploit Author: Paras Bhatia Discovery Date: 2020-06-07 Vulnerable Software: Frigate Version: "Command...

CVE-2017-7281: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension,...

CVE-2014-3008: Improper Neutralization of Special Elements used in an OS Command

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php...