Privilege Escalation

redhat directory server is vulnerable to privilege escalation. It was found that multiple scripts shipped with Red Hat Directory Server set the LDLIBRARYPATH environment variable to an insecure value containing an empty path. A local user able to trick a user running those scripts usually the roo...

Privilege Escalation

rgmanager is vulnerable to privilege escalation. The vulnerability exists as it was discovered that certain resource agent scripts set the LDLIBRARYPATH environment variable to an insecure value containing empty path elements. A local user able to trick a user running those scripts to run them...

Schneider Electric Limited CET850 suffers from a dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France. A dll hijacking vulnerability exists in Schneider Electric SA CET850, which can be exploited by an attacker to load a malicious dll and execute malicious code...

DLL Hijacking Vulnerability in GX Works2

GX Works2 is PLC programming software from Mitsubishi Electric, a Japanese company. GX Works2 suffers from a DLL hijacking vulnerability, which allows an attacker to construct a malicious application and place it in a specific path, causing the application to load a malicious DLL and execute it...

DLL Hijacking Vulnerability in IceAssistant PC Version

Ice Assistant is a professional Apple cell phone management assistant. There is a DLL hijacking vulnerability in IceAssistant PC version, which can be exploited by attackers to execute malicious DLL files...

Schneider Electric Limited Zelio Soft 2 installer suffers from a dll hijacking vulnerability

Zelio Soft 2 is a programming software for small intelligent controllers. A dll hijacking vulnerability exists in Zelio Soft 2 by Schneider Electric Ltd. that can be exploited by an attacker to load a malicious dll and execute malicious code...

Hancom Office HwordApp.dll Library tfo_common Component Resource Management Error Vulnerability

Hancom Office is a mobile office program from the Korean company Hancom. The program supports viewing and editing documents in many formats. hncbd90 is one of the hncbd90 libraries. A resource management error vulnerability exists in the tfocommon component of the HwordApp.dll library in Hancom...

SUSE-SU-2020:0722-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...

Adaware antivirus elevation of privilege vulnerability

Lavasoft Adaware antivirus is a suite of antivirus software from Lavasoft Canada. A security vulnerability exists in Lavasoft Adaware antivirus versions 12.6.1005.11662 and 12.7.1055.0. The vulnerability can be exploited by an attacker to elevate privileges with the help of a malicious DLL...

Kingsoft Typewriter suffers from dll hijacking vulnerability

Kingsoft Typewriter is a typing software. A dll hijacking vulnerability exists in the Kingsoft Typewriter installer. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

WPS Office Campus Edition suffers from dll hijacking vulnerability

WPS Office Campus Edition is for campuses, teachers, students and other educational users, adding the team function of cloud documents, adding LaTeX formulas, geometric diagrams, mind maps and other professional drawing tools, combining with AI technology, adding thesis checking, super resume,...

Baidu Five Strokes Input Method Exploits Dll Hijacking Vulnerability

Baidu 5-stroke Input Method is a Chinese 5-stroke input method software under Baidu. Baidu Five Strokes Input Method suffers from a Dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Dll Hijacking Vulnerability in Sogou High Speed Browser

Sogou High Speed Browser is developed by Sogou, based on Google chromium kernel, and strives to provide users with a seamless cross-terminal experience, making it easier to surf the Internet and smoother to read web pages. Sogou High Speed Browser has a Dll hijacking vulnerability, which can be...

Foxit PDF Editor Personal Edition Dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. Foxit PDF Editor Personal Edition has a Dll...

DLL Hijacking Vulnerability in Haiwell Cloud Configuration Software

Xiamen Haiwei Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production, sales and service. Haiwell Cloud Configuration Software HaiwellScada has a DLL hijacking vulnerability that can be exploited by placing a specially crafted DLL file on the...

Shanghai Gesi Network Technology Co., Ltd Format Factory suffers from dll installation hijacking vulnerability

Format Factory Format Factory was founded by Shanghai Format Factory Network Co., Ltd. in February 2008, is the Internet software for global users. Ltd. Format Factory has a dll installation hijacking vulnerability, which can be exploited by attackers to cause the user's computer to be...

Baidu Input Method of Beijing Baidu Netcom Technology Co. Ltd. suffers from dll hijacking vulnerability

Baidu Input Method is an input method that integrates handwriting, voice, win10, strokes, mouse handwriting and mobile input method. Ltd. Baidu Input Method has a dll hijacking vulnerability, which can be exploited by attackers to cause a user's computer to be remote controlled or implanted with ...

Trend Micro Vulnerability Protection DLL Sideloading Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection. A DLL side-loading vulnerability exists in Trend Micro Vulnerability Protection 2.0. The vulnerability can be exploited by an attacker via the produ...

CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial...

CVE-2019-19741

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...