Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2021-61121)

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A security vulnerability exists in Siemens Jt2go and Siemens Teamcenter Visualization, which stems from the lack of proper validation of...

CVE-2021-33738

A vulnerability has been identified in JT2Go All versions V13.2.0.2, Teamcenter Visualization All versions V13.2.0.2. The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past th...

CVE-2021-37179

A vulnerability has been identified in Solid Edge SE2021 All Versions SE2021MP7. The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free condition. An attacker could leverage this vulnerability to execute...

CVE-2021-33738

CVE-2021-33738 affects Siemens JT2Go and Teamcenter Visualization (all versions before 13.2.0.2). The plmxmlAdapterSE70.dll library fails to validate user-supplied data when parsing PAR files, causing an out-of-bounds read past the end of an allocated buffer and allowing information leakage withi...

Siemens Solid Edge 资源管理错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. The software can be used in industries such as part design, assembly design, sheet metal design, welding design, etc. A security vulnerability exists in Siemens Solid Edge, which stems from the lack of proper validation of th...

CVE-2021-33738: Out-of-bounds Read

A vulnerability has been identified in JT2Go All versions V13.2.0.2, Teamcenter Visualization All versions V13.2.0.2. The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past th...

PT-2021-20313

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.2.0.2 Teamcenter Visualization versions prior to 13.2.0.2 Description: A vulnerability has been identified in the plmxmlAdapterSE70.dll library, which lacks proper validation of user-supplied data when parsing PAR...

Siemens Teamcenter Visualization和Siemens Jt2go缓冲区错误漏洞

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A security vulnerability exists in Siemens Jt2go and Siemens Teamcenter Visualization, which stems from the lack of proper validation of...

PT-2021-21945

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 for Windows versions prior to build 27009 Acronis Agent for Windows versions prior to build 26226 Description: The issue allows local privilege escalation via DLL hijacking. This means an attacker could potentially...

Local privilege escalation due to a DLL hijacking vulnerability

...

Go-Shellcode - A Repository Of Windows Shellcode Runners And Supporting Utilities

go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. The available Shellcode runners include: CreateFiber CreateProcess CreateProcessWithPipe CreateRemoteThread CreateRemoteThreadNati...

Canon Driver Privilege Escalation

Canon TR150 print drivers versions 3.71.2.10 and below allow local users to read/write files within the "CanonBJ" directory and its subdirectories. By overwriting the DLL at C:\ProgramData\CanonBJ\IJPrinter\CNMWINDOWS\Canon TR150 series\LanguageModules\040C\CNMurGE.dll with a malicious DLL at the...

CVE-2021-32580

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

Privilege escalation

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

CVE-2021-32580

CVE-2021-32580 affects Acronis True Image for Windows prior to 2021 Update 4. The issue is a DLL hijacking flaw that enables local privilege escalation. Connected sources corroborate the vulnerability as a local-privilege-elevation issue tied to DLL loading, but do not provide exploit details or ...

CVE-2021-32580

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

Cisco Packet Tracer for Windows DLL Injection Vulnerability

Cisco Packet Tracer is a cross-platform visual emulation tool that allows users to create network topologies and emulate computer networks. The vulnerability can be exploited to execute arbitrary code on the affected system with the privileges of another user account by inserting a configuration...

Acronis True Image 代码问题漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image A security vulnerability exists in version 2021 Update 4 and earlier for...

CVE-2021-32580: Uncontrolled Search Path Element

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

PT-2021-19794

Name of the Vulnerable Software and Affected Versions Acronis True Image versions prior to 2021 Update 4 for Windows Description The issue allows local privilege escalation due to DLL hijacking. Recommendations For Acronis True Image versions prior to 2021 Update 4 for Windows, update to 2021...