651 matches found
CVE-2023-38146
╪е╪л╪и╪з╪к ╪з┘Д┘Е┘Б┘З┘И┘Е ┘Д╪л╪║╪▒╪й ThemeBleed CVE-2023-38146 ╪│┘Е╪з╪к ┘И┘К┘Ж╪п┘И╪▓ 11 ┘Е╪│╪к┘И╪н┘Й ╪и╪┤┘Г┘Д ┘Г╪и┘К╪▒ ┘Е┘Ж https://github.com/gabe-k/themebleed ╪з┘Д╪░┘К ┘К╪╣┘Е┘Д ┘Б┘В╪╖ ╪╣┘Д┘Й ┘И┘К┘Ж╪п┘И╪▓ ╪з┘Д╪│╪и╪и ╪з┘Д╪░┘К ╪п┘Б╪╣┘Ж┘К ┘Д┘Г╪к╪з╪и╪й ┘З╪░╪з. ╪з╪│╪к╪о╪п┘Е╪к ┘Г┘И╪п┘Л╪з ┘Е╪╣╪п┘Д╪з┘Л ┘Е┘Ж impacket smbserver.py https://github.com/fortra/impacket/blob/master/impacket/smbserver.py ╪г╪┤┘К╪з╪б ┘Е┘Б┘К╪п...
CVE-2023-38146-Poc
ThemeBleed CVE-2023-38146 рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ Windows 11 рдереАрдореНрд╕ рдХрд╛ PoC рдпрд╣ https://github.com/gabe-k/themebleed рд╕реЗ рдХрд╛рдлреА рдкреНрд░реЗрд░рд┐рдд рд╣реИ, рдЬреЛ рдХреЗрд╡рд▓ рд╡рд┐рдВрдбреЛрдЬрд╝ рдкрд░ рдЪрд▓рддрд╛ рд╣реИ рдпрд╣реА рдХрд╛рд░рдг рд╣реИ рдХрд┐ рдореИрдВрдиреЗ рдЗрд╕реЗ рд▓рд┐рдЦрдиреЗ рдХрд╛ рдирд┐рд░реНрдгрдп рд▓рд┐рдпрд╛ред impacket smbserver.py https://github.com/fortra/impacket/blob/master/impacket/smbserver.py рд╕реЗ рд╕рдВрд╢реЛрдзрд┐рдд...
CVE-2026-50343-InstallService-EoP
CVE-2026-50343: InstallService StaticPluginMap EoP рд╕рд╛рдорд╛рдиреНрдп рдЙрдкрдпреЛрдЧрдХрд░реНрддрд╛ рд╕реЗ SYSTEM рдореИрдВрдиреЗ рд╕реНрд╡рддрдВрддреНрд░ рд░реВрдк рд╕реЗ CVE-2026-50343 рдХреЗ рд░реВрдк рдореЗрдВ рдЯреНрд░реИрдХ рдХреА рдЬрд╛ рд░рд╣реА рдЗрд╕ рднреЗрджреНрдпрддрд╛ рдХреА рдЦреЛрдЬ рдХреА рдФрд░ рд░рд┐рдкреЛрд░реНрдЯ рдХрд┐рдпрд╛ред MSRC рдиреЗ рдореЗрд░реА рд╕рдмрдорд┐рд╢рди рдХреЛ рдХрд┐рд╕реА рдЕрдиреНрдп рд╢реЛрдзрдХрд░реНрддрд╛ рдХреА рдкрд╣рд▓реЗ рдХреА рд░рд┐рдкреЛрд░реНрдЯ рдХреА рдбреБрдкреНрд▓рд┐рдХреЗрдЯ рдХреЗ рд░реВрдк рдореЗрдВ рдкреБрд╖реНрдЯрд┐ рдХреАред рдПрдХ рд╕рд╛рдорд╛рдиреНрдп рдЗрдВрдЯрд░реИрдХреНрдЯ...
CVE-2026-49176_LPE_POC
CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...
CVE-2024-28589
CVE-2024-28589 Una vulnerabilit├а ├и stata scoperta in Axigen Mail Server per Windows, che interessa tutte le versioni fino alla 10.5.18 e consente l'escalation locale dei privilegi. Descrizione: ├И stato riscontrato che Axigen Mail Server ├и vulnerabile a un'escalation locale dei privilegi a causa d...
LdrLibraryEx
LdrLibraryEx Eine kleine x64-Bibliothek zum Laden von DLLs in den Speicher. Eigenschaften geringe Abh├дngigkeiten & wenige verwendete Funktionen nur ntdll.dll wird verwendet positionsunabh├дngiger Code leichtgewichtig und minimal einfach zu verwenden Module aus dem Speicher laden Module von der...
PT-2026-66482
Name of the Vulnerable Software and Affected Versions IBM Aspera Desktop App versions 1.0.5 through 1.0.19 Description An issue exists that allows arbitrary code execution by loading DLL files during the application start-up process. Recommendations At the moment, there is no information about a...
Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Overview Duplicati v2.3.0.1 is vulnerable to arbitrary code execution when installed outside the default C:\Program Files\Duplicati 2\ directory. An attacker with local user privileges who can write files to the Duplicati installation directory can execute arbitrary code by placing malicious file...
CVE-2026-11958
Local privilege escalation by loading DLLs from a shared temporary directory in ANSSIтАЩs DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to the system, can place a malicious DLL in C:\Windows\Temp and wait for the application to be executed. Because DFIR-ORC is extracted and...
CVE-2026-11958
ANSSI DFIR-ORC (versions up to 10.2.7) is affected by local privilege escalation via DLLs loaded from a shared temporary directory. An attacker with prior system access can drop a malicious DLL in C:\Windows\Temp and wait for the DFIR-ORC process, which is extracted and executed from that locatio...
EUVD-2026-37877
Local privilege escalation by loading DLLs from a shared temporary directory in ANSSIтАЩs DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to the system, can place a malicious DLL in C:\Windows\Temp and wait for the application to be executed. Because DFIR-ORC is extracted and...
CVE-2025-71316
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being...
PT-2026-46313
Name of the Vulnerable Software and Affected Versions SQLite sqldiff.exe versions prior to 2025-12-26 Description The sqldiff.exe utility does not securely handle the conversion of Unicode characters to ANSI codepages by the Microsoft Windows C runtime. An attacker can exploit this by using the...
PT-2026-40578
Bytello Share Windows Edition installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
CVE-2026-34488
Technical details beyond the high-level description are not publicly available in the provided documents. Monitor for updates from the listed references for affected products, vulnerable components, and remediation guidance.
CVE-2026-34488
IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges...
EUVD-2026-25138
The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...
CVE-2026-32679
CVE-2026-32679 affects LiveOn Meet Client for Windows and Canon Network Camera Plugin installers (Downloader5Installer.exe, Downloader5InstallerForAdmin.exe, CanonNWCamPlugin.exe, CanonNWCamPluginForAdmin.exe). The installers insecurely load DLLs from the same directory; if a malicious DLL is pre...
Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries
Overview LiveOn Meet provided by Japan Media Systems Corporation is a web conferencing system. The installer of LiveOn Meet Client for Windows and the installer of Canon Network Camera Plugin insecurely load Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-32679 This...
PT-2026-31881
Name of the Vulnerable Software and Affected Versions Emocheck affected versions not specified Description Emocheck insecurely loads Dynamic Link Libraries DLLs. If a crafted DLL file is placed in the same directory, arbitrary code may be executed with the privilege of the user invoking EmoCheck...