ABB PB610 HMIStudio accepts malicious DLL file in an application

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context...

CVE-2019-19688

A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited allowing an attacker to place a malicious DLL file into the application directory and elevate privileges...

McAfee Tech Check DLL Search Order Hijacking Vulnerability

McAfee Tech Check is a computer software and hardware scanning and diagnostic application from the U.S. company McAfee McAfee. McAfee Tech Check 3.0.0.17 and earlier versions contain a DLL search order hijacking vulnerability that can be exploited by a local attacker to execute arbitrary code via...

CVE-2019-19382

Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation...

Xunjie CAD Converter installer is vulnerable to dll hijacking

Swift CAD Converter is a CAD version converter and PDF to CAD software. A dll hijacking vulnerability exists in the Swift CAD Converter installer. An attacker can exploit this vulnerability to execute arbitrary code during program installation...

Baidu HI pc client software suffers from DLL hijacking vulnerability

Baidu Hi is an instant messaging software that combines text messaging, audio and video calling, file transfer and more. The Baidu HI pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to...

DLL Hijacking Vulnerability in 263 Cloud Communications PC Client Software

263 cloud communication is the first enterprise instant messaging tool based on intelligent mobile terminals, from pc client to mobile terminal extension, to meet the needs of users at any time with the news. 263 cloud communication pc client software DLL hijacking vulnerability, the attacker can...

DLL Hijacking Vulnerability in EaseUS pc Client Software

YiXin is an instant messaging software jointly developed by NetEase and China Telecom. The PC version of YiXin focuses on free chatting features, as well as high-definition chatting voice, posting emoticons and so on. There is a DLL hijacking vulnerability in EaseUS pc client software, which can ...

DLL Hijacking Vulnerability in Ali Qianniu's pc Client Software

Qianniu Workbench is a seller belonging to Alibaba is a free online business communication software customized for merchants. Aliqianniu pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process an...

DLL Hijacking Vulnerability in LePlay Screen Casting pc Client Software

LePlay Screen Casting for PC, LePlay Screen Casting for PC is a smart computer screen casting software. LePlay screen casting pc client software exists DLL hijacking vulnerability, attackers can use the vulnerability in the client process to inject executable DLL file, to perform arbitrary...

CC Live pc client software suffers from DLL hijacking vulnerability

NetEase cc live is a free voice client software launched by NetEase, it can bring the majority of online chat entertainment enthusiasts and gamers more convenient voice services. CC live pc client software DLL hijacking vulnerability, allowing attackers to exploit the vulnerability in the client...

DLL Hijacking Vulnerability in Karaoke Companion PC Client Software

Karaoke Companion is a karaoke software specially designed and produced for friends who love to sing, Karaoke Companion can help you create a variety of sound effects, including electric sound, vibrato, echo and so on. Karaoke Partner pc client software has a DLL hijacking vulnerability that can ...

STAMP Workbench Installer Code Issue Vulnerability

STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...

QQ Pinyin Input Method Exploits DLL Hijacking Vulnerability

QQ Pinyin Input Method is a Chinese pinyin input method software. A DLL hijacking vulnerability exists in QQ Pinyin Input Method. An attacker can exploit this vulnerability to load a malicious dll and execute arbitrary code...

JVN#19386781: STAMP Workbench installer may insecurely load Dynamic Link Libraries

STAMP Workbench is a modeling tool for STAMP provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA. It is distirbuted as a ZIP archive or an Windows executable installer. The Windows executable installer contains an issue with the DLL search path, which may lead to insecurely loading...

The vulnerability of the SoMachine and SoMove logic controller programming programs lies in the use of an unreliable search path, which allows a hacker to load the malicious DLL library and execute arbitrary code.

The vulnerability of the SoMachine and SoMove logic controller programming programs is related to the use of an unreliable search path. Exploiting this vulnerability allows a hacker to load the malicious DLL library and execute arbitrary code...

Cisco Webex Teams Code Issue Vulnerability

Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes video conferencing, group messaging and file sharing features. A code issue vulnerability exists in Cisco Webex Teams for Windows-based platforms, which stems from the program failing to adequately validate...

CVE-2019-16861

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...

PT-2019-14836 · Code42 · Code42 Server

Name of the Vulnerable Software and Affected Versions: Code42 server versions through 7.0.2 for Windows Description: The issue allows a non-administrative attacker on the local server to potentially execute arbitrary code at an elevated privilege. This is due to an Untrusted Search Path in certai...