DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 DLL Planting en Slack 4.33.73 - CVE-2023-38820 Descubridor: Idan Malihi Descripción Un problema en Slack v.4.33.73 permite a un atacante local ejecutar código arbitrario mediante el mecanismo de carga de DLL en los archivos profapi.dll, CRYPTBASE.dll,...

CVE-2020-9442

Título del Exploit: OpenVPN Connect para Windows MSI - 3.1.0.361 - Escalada de Privilegios Fecha: 2020-02-28 Autor: Andrew Hess Enlace del software: https://openvpn.net/client-connect-vpn-for-windows/ Versión: 3.1.0.361 MSI CVE: CVE-2020-9442 Historial 2019.12.15 - Vulnerabilidad descubierta...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / Plantación de DLL en objetos COM PoC original: https://www.exploit-db.com/exploits/38968/ Ejecutar poc.rtf con mqrt.dll en el mismo directorio activará la dll, que en este caso pop calc también funcionará crear una DLL de descarga/ejecución Exportar la dll para...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 Plantación de DLL en Corsair iCUE v.5.3.102 CVE-2023-38822 Descubridor: Idan Malihi Descripción Un problema en Corsair iCUE v.5.3.102 permite a un atacante local ejecutar código arbitrario a través de los componentes MPDC.dll, CRYPTSP.dll, dcomp.dll,...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

CVE-2020-1337

CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd and Tomer Bar at SafeBreach @safebreach were acknowledged by Microsoft by the CVE-2020-1048, a Windows Spooler Vulnerability that allows an elevation of privilege on Windows 7 and later. Some details were disclosed by Alex...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting en CoD MW Warzone 2 - CVE-2023-38821 Descubridor: Idan Malihi Descripción Un problema en Activision Call of Duty Modern Warfare: Warzone v.2 permite a un atacante local ejecutar código arbitrario a través de un archivo manipulado dirigido a los...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

CVE-2025-13670

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13670 High Level Synthesis Compiler Security Advisory

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665 Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13665

Technical details about CVE-2025-13665 are not publicly provided in the supplied documents. Please monitor for updates from the vendor and security advisories.

CVE-2025-13665: Uncontrolled Search Path Element

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

CVE-2025-13670: Uncontrolled Search Path Element

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability...

EUVD-2022-53467

Malicious code in bioql PyPI...

CVE-2023-22947

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider SP before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt rather than...