EUVD-2021-31075

Malicious code in bioql PyPI...

Seagate Toolkit 安全漏洞

Seagate Toolkit is a software for managing and backing up data from Seagate USA. A security vulnerability exists in Seagate Toolkit versions prior to 2.35.0.6 that stems from not verifying the origin or integrity of a DLL and could lead to the execution of arbitrary code...

CVE-2024-13990

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

PT-2025-38007

Name of the Vulnerable Software and Affected Versions: Alludo MindManager versions prior to 25.0.208 Description: Alludo MindManager on Windows allows attackers to potentially execute code as other local users on the same machine by writing DLL files to directories within victims' DLL search path...

PT-2025-38067

Name of the Vulnerable Software and Affected Versions: CYRISMA Agent versions prior to 444 Description: A DLL hijacking vulnerability allows local users to escalate privileges and execute arbitrary code via multiple DLLs. Recommendations: Update CYRISMA Agent to version 444 or later...

CVE-2025-57392

BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILEALLACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon...

CVE-2025-10198 LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...

Linux Distros Unpatched Vulnerability : CVE-2017-6903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw,...

CVE-2025-7676

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...

CVE-2025-6241 CVE-2025-6241

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious DLL to that directory with arbitrary...

Lakeside Software SysTrack 安全漏洞

Lakeside Software SysTrack is an endpoint data monitoring software from Lakeside Software, USA. A security vulnerability exists in Lakeside Software SysTrack that stems from an attempt by the LsiAgent.exe component to load multiple DLL files that are not present in the default installation, which...

CVE-2024-24916

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

CVE-2024-24916

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

CVE-2024-24916 DLL-HiJacking

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

CVE-2024-24916

CVE-2024-24916 concerns DLL hijacking in the installer for Check Point SmartConsole. The vulnerability stems from untrusted DLLs in the installer’s directory that can be loaded via the Windows DLL search order, potentially allowing arbitrary code execution with installer privileges (admin). Affec...

PT-2025-26216 · Check Point · Check Point Smartconsole

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin. Recommendations: At the moment,...

CVE-2024-13946

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

CVE-2022-48225

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation process is vulnerable to DLL hijacking, because it attempts to execute with elevated privileges multiple non-existent DLLs...

CVE-2021-34803

TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations...

CVE-2024-13946 Binary Planting / LoadLibrary DLL's not Signed

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...