DLL Hijacking Vulnerability in NetEase Email Master for Windows Edition

NetEase Email Master is an email client that supports multiple platforms. A DLL hijacking vulnerability exists in NetEase Mail Master for Windows, which can be exploited by attackers to execute malicious code...

Tencent App Store PC version suffers from DLL hijacking vulnerability

Tencent Application Treasure is an application acquisition platform created by Tencent Application Center. A DLL hijacking vulnerability exists in the PC version of Tencent App Store, which can be exploited by attackers to execute malicious code...

Linux/x86 Dynamic MMX+FPU Encoded Add Root User Shellcode (155 bytes)

155 bytes small Linux/x86 shellcode that has a MMX stub decoder that dynamically decodes the payload in memory. The FPU GetPC technique is used to determine the offset from EIP dynamically in running memory. Once decoded. this shellcode adds the user 'ctl' with the password 'ctl' to the /etc/pass...

Linux/x64_86 Egghunter Execve Shellcode (63 bytes)

63 bytes small Linux/x6486 dynamic egghunter shellcode that searches memory for 2 instances of the egg. When the eggs are found, the egghunter passes execution control to the payload at the memory address of the eggs. The payload is an execve/bin/bash shellcode. // Shellcode Title: Linux/x64 -...

CVE-2020-1631

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning ZTP allows an unauthenticated attacker to perform local file inclusion LFI or path traversal. Using this vulnerability...

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

CVE-2020-4311

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 17708...

The vulnerability of the ANGEL graphics engine in Google Chrome browsers, related to the execution of operations beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2020-19607

Name of the Vulnerable Software and Affected Versions EcoStruxure Machine Expert – Basic or SoMachine Basic programming software affected versions not specified Description A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' issue exists, whi...

Zijin Bridge Monitoring and Configuration Software 6.5 DLL Hijacking Vulnerability

Zijinqiao monitoring and configuration software is an industrial automation monitoring and configuration software developed by Daqing Zijinqiao Software Technology Company, which is funded by PetroChina. A DLL hijacking vulnerability exists in Zijinqiao Monitoring and Configuration Software 6.5,...

DLL Hijacking Vulnerability in Qi Fan Game Platform of Shanghai Qi Fan Digital Technology Co.

Qifan Game Platform is a gaming platform developed by Shanghai Qifan Digital Technology Co. Ltd. A DLL hijacking vulnerability exists in the Qi Fan Game Platform, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Sichuan Xunyou Network Technology Co., Ltd. Xunyou Online Game Accelerator DLL Hijacking Vulnerability

XunYou Online Game Accelerator is a specialized acceleration software for online games. Sichuan Xunyou Network Technology Co., Ltd Xunyou online game gas pedal dll hijacking vulnerability, attackers can use the loophole in the client process to inject executable DLL file, the execution of arbitra...

DLL Hijacking Vulnerability in Haofang Gaming Platform of Shanghai Haofang Online Information Technology Co.

Haofang Gaming Platform is a competitive gaming platform. Shanghai Haofang Online Information Technology Co. Haofang e-sports platform has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Shenzhen Tencent Computer System Limited Tencent Online Game Accelerator suffers from DLL hijacking vulnerability

Tencent online game gas pedal is by an online game gas pedal tool. Shenzhen Tencent Computer Systems Limited Tencent online game gas pedal DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

DLL hijacking vulnerability in Dolphin Online Game Accelerator of Xiamen Xiangyou Network Technology Co.

Dolphin Online Game Accelerator is an online game acceleration software. Dolphin Online Game Accelerator has a DLL hijacking vulnerability, which can be exploited by attackers to inject executable DLL files into client processes to perform arbitrary functions...

DLL Hijacking Vulnerability in NetEase UU Accelerator of Guangzhou NetEase Computer System Co.

NetEase UU Accelerator is an online game gas pedal product. Guangzhou NetEase Computer Systems Co., Ltd. Netease UU Accelerator DLL hijacking vulnerability, an attacker can exploit the vulnerability in the client process to inject executable DLL file, to perform arbitrary functions...

Shenzhen Xunlei Network Technology Co., Ltd. Xunlei online game gas pedal has dll hijacking vulnerabilities

Xunlei online game gas pedal is Xunlei company launched a special software for the majority of online game players. Shenzhen Xunlei Network Technology Co., Ltd Xunlei online game gas pedal dll hijacking vulnerability, attackers can use the loophole in the client process to inject executable DLL...

DLL Hijacking Vulnerability in Quick Play Game Box of Shenzhen Yunqi Network Technology Co.

Quick Play Game Box is a game box software. Shenzhen Yunqi Network Technology Co., Ltd Quick Play Game Box has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

DLL Hijacking Vulnerability in Raytheon NN Accelerator of Raytheon (Wuhan) Information Technology Co.

Thor NN Accelerator is an international game acceleration tool. Raytheon Wuhan Information Technology Co. Raytheon NN Accelerator suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functio...