252 matches found
DLLHSC
DLLHSC DLL Hijack SCanner — инструмент для генерации зацепок и автоматизации поиска кандидатов для перехвата порядка поиска DLL DLL Search Order Hijacking. Содержание этой страницы Содержимое этого репозитория Режимы работы Инструкция по компиляции и запуску Меню помощи Примеры запуска Обратная...
iscsicpl_bypassUAC
iscsicpl autoelevate DLL 검색 순서 하이재킹 UAC 우회 0day iscsicpl.exe 바이너리는 SysWOW64를 통해 64비트 호스트에서 32비트 Microsoft 바이너리를 실행할 때 DLL 검색 순서 하이재킹DLL Search Order Hijacking 취약점에 노출됩니다. 32비트 바이너리는 사용자 %Path% 내에서 iscsiexe.dll을 검색합니다. autoelevate가 활성화되어 있으므로 프록시 DLL을 사용하여 "iscsicpl.exe"를 통해 코드를 실행하는 방식으로 악용될 수...
CVE-2024-0197-POC
CVE-2024-0197-POC Thales Sentinel HASP LDK의 로컬 권한 상승에 대한 개념 증명. 처음에는 하나를 개발하려고 했지만, 결국 불필요한 것으로 판명되었습니다. 극복해야 할 경쟁 조건race condition은 없으며, 알려진 위치에서 간단한 DLL 검색 순서 하이재킹만으로 SYSTEM 권한을 획득할 수 있습니다. 간단히: 1. raw.cpp를 fltlib.dll로 컴파일하여 AppData\Local\Temp에 넣습니다 C:\Windows\System32\fltlib.dll로 이어지는 적절한 프록시...
DLL-Planting-Slack-4.33.73-CVE-2023-38820
DLL-Planting-Slack-4.33.73-CVE-2023-38820 Slack 4.33.73의 DLL Planting - CVE-2023-38820 발견자: Idan Malihi 설명 Slack Slack v.4.33.73의 문제로 인해 로컬 공격자가 profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll, MSASN1.dll, mf.dll, mfplat.dll 및 RTWorkQ.DLL 파일의 DLL 로딩 메커니즘을 통해 임의 코드를 실행할 수 있습니다. 재현 단계 취약점을 악용하려면...
CVE-2026-9633
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...
CVE-2026-9634
CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...
CVE-2026-9633
CVE-2026-9633 affects Rockwell Automation's Redundancy Module Configuration Tool . The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, but due to incorrect default permissions , one or more of these directories may be writable by standard (non-administrator) u...
CVE-2026-9169: Uncontrolled Search Path Element
DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...
CVE-2026-38972: Uncontrolled Search Path Element
Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...
CVE-2026-22561: Uncontrolled Search Path Element
Uncontrolled search path elements in Anthropic Claude for Windows installer Claude Setup.exe versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs e.g., profapi.dll from its own directory after UAC elevation, enabling arbitrary code...
CVE-2026-4255: Inclusion of Functionality from Untrusted Control Sphere
A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows 64-bit allows a local attacker to escalate privileges via DLL side-loading. The application loads certain dynamic-link library DLL dependencies using the default Windows search order, which includes directories...
CVE-2022-42945
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...
CVE-2021-31853
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption MDE prior to 7.3.0 HF2 7.3.0.183 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...
CVE-2023-53937: Uncontrolled Search Path Element
Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...
CVE-2025-34417: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...
EUVD-2020-28439
Malware in sbrugna...
EUVD-2019-13281
Malware in sbrugna...
EUVD-2020-25870
Malware in sbrugna...