CVE-2018-21241

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...

CVE-2020-13812

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...

Raonwiz K Upload Parameter Injection Vulnerability

Raonwiz K Upload is a file transfer component from the Korean company Raonwiz. A security vulnerability exists in RAONWIZ K Upload 2018.0.2.51 and earlier versions. An attacker can use the vulnerability to modify parameters, download arbitrary DLL files and perform injection operations...

CVE-2020-7808

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update moduleweb.js allows an attacker to modify arguments which causes downloading a random DLL and injection on it...

Opto 22 SoftPAC Project Code Issue Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A code issue vulnerability exists in Opto 22 SoftPAC Project 9.6 and...

CVE-2020-10616

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts...

A4Tech 8-in-one software suffers from dll hijacking vulnerability

Headquartered in Taipei, Taiwan, A4Tech is an independent brand in the computer field and has successfully established sales channels in the global market. A4Tech 8-in-one software suffers from a dll hijacking vulnerability. An attacker can execute arbitrary code by replacing a dll with the same...

Accusoft ImageGear Input Validation Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. An input validation error vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library in Accusoft ImageGear versions 19.4, 19.5, and 19.6. An attacker can exploit the vulnerabilit...

DLL Hijacking Vulnerability in 360 Extreme Browser

360 Extreme Browser is a dual-core browser owned by Beijing Qihoo Technology Co. 360 Extreme Browser suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in NetEase Email Master for Windows Edition

NetEase Email Master is an email client that supports multiple platforms. A DLL hijacking vulnerability exists in NetEase Mail Master for Windows, which can be exploited by attackers to execute malicious code...

PT-2020-19607

Name of the Vulnerable Software and Affected Versions EcoStruxure Machine Expert – Basic or SoMachine Basic programming software affected versions not specified Description A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' issue exists, whi...

Zijin Bridge Monitoring and Configuration Software 6.5 DLL Hijacking Vulnerability

Zijinqiao monitoring and configuration software is an industrial automation monitoring and configuration software developed by Daqing Zijinqiao Software Technology Company, which is funded by PetroChina. A DLL hijacking vulnerability exists in Zijinqiao Monitoring and Configuration Software 6.5,...

Sichuan Xunyou Network Technology Co., Ltd. Xunyou Online Game Accelerator DLL Hijacking Vulnerability

XunYou Online Game Accelerator is a specialized acceleration software for online games. Sichuan Xunyou Network Technology Co., Ltd Xunyou online game gas pedal dll hijacking vulnerability, attackers can use the loophole in the client process to inject executable DLL file, the execution of arbitra...

Shenzhen Tencent Computer System Limited Tencent Online Game Accelerator suffers from DLL hijacking vulnerability

Tencent online game gas pedal is by an online game gas pedal tool. Shenzhen Tencent Computer Systems Limited Tencent online game gas pedal DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

DLL Hijacking Vulnerability in Haofang Gaming Platform of Shanghai Haofang Online Information Technology Co.

Haofang Gaming Platform is a competitive gaming platform. Shanghai Haofang Online Information Technology Co. Haofang e-sports platform has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

DLL hijacking vulnerability in Dolphin Online Game Accelerator of Xiamen Xiangyou Network Technology Co.

Dolphin Online Game Accelerator is an online game acceleration software. Dolphin Online Game Accelerator has a DLL hijacking vulnerability, which can be exploited by attackers to inject executable DLL files into client processes to perform arbitrary functions...

Wuhan No. No. Technology Co. 99box Game Manager suffers from dll hijacking vulnerability

99box is a very cool gaming service platform. Wuhan No. 99box Game Manager Co., Ltd. has a dll hijacking vulnerability that can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Big Research Insider Edition has a dll hijacking vulnerability

Big Research Insider Edition is a stock speculation software. Big Research Insider Edition suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Tiger's tooth PC client has dll hijacking vulnerability

Tiger Tooth PC client is Tiger Tooth live official for the audience to provide a computer client, Tiger Tooth live is a game live mainly pop-up interactive live platform Tiger Tooth PC client dll hijacking vulnerability, attackers can use the vulnerability to load malicious dll, the execution of...

Flush Demo Special Edition suffers from dll hijacking vulnerability

Flush simulation stock speculation special edition is a real simulation stock speculation software trading system. Flush simulation special version of the existence of dll hijacking vulnerability, an attacker can use the vulnerability to execute arbitrary code...