220 matches found
DLLHSC
DLLHSC DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Index of this page Contents of this repository Modes of operation Compile and Run Guidance Help menu Example Runs Feedback Contents of this repository This repository hosts...
CVE-2024-0197-POC
CVE-2024-0197-POC Thales Sentinel HASP LDK 中本地权限提升的概念验证。 我最初想自己开发一个，但最终发现没有必要。 没有需要争取的竞争条件，从一个已知位置进行简单的 DLL 搜索顺序劫持即可获得 SYSTEM 权限。 我们只需： 1. 将 raw.cpp 编译为 fltlib.dll 并放入 AppData\Local\Temp（它必须是一个正确的代理 DLL，指向 C:\Windows\System32\fltlib.dll）。 2. 然后运行 msiexec.exe /fa PATHTOMSI。...
iscsicpl_bypassUAC
iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day The iscsicpl.exe binary is vulnerable to a DLL Search Order hijacking vulnerability when running 32bit Microsoft binary on a 64bit host via SysWOW64. The 32bit binary, will perform a search within user %Path% for the DLL iscsiexe.dll...
DLL-Planting-Slack-4.33.73-CVE-2023-38820
DLL-Planting-Slack-4.33.73-CVE-2023-38820 Slack 4.33.73 中的 DLL 植入 - CVE-2023-38820 发现者：Idan Malihi 描述 Slack v.4.33.73 中的一个问题允许本地攻击者通过 profapi.dll、CRYPTBASE.dll、KBDUS.DLL、DPAPI.dll、MSASN1.dll、mf.dll、mfplat.dll 和 RTWorkQ.DLL 文件中的 DLL 加载机制执行任意代码。 复现步骤 要利用该漏洞，攻击者应下载并安装 Slack 程序，并按照以下步骤操作： 1. 使用...
CVE-2026-9633
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...
CVE-2026-9634
CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...
CVE-2026-9633
CVE-2026-9633 affects Rockwell Automation's Redundancy Module Configuration Tool . The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, but due to incorrect default permissions , one or more of these directories may be writable by standard (non-administrator) u...
CVE-2022-42945
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...
CVE-2021-31853
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption MDE prior to 7.3.0 HF2 7.3.0.183 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...
EUVD-2020-25870
Malware in sbrugna...
EUVD-2020-28439
Malware in sbrugna...
EUVD-2019-13281
Malware in sbrugna...
EUVD-2020-30456
Malware in sbrugna...
EUVD-2018-10623
Malware in sbrugna...
EUVD-2019-13302
Malware in sbrugna...
EUVD-2019-1847
Malware in sbrugna...
EUVD-2019-13248
Malware in sbrugna...
EUVD-2019-13222
Malware in sbrugna...