TIM Windows client suffers from dll hijacking vulnerability

TIM is a cross-platform communication tool that focuses on team office collaboration. A dll hijacking vulnerability exists in the TIM Windows client, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

Steam client has dll hijacking vulnerability

Steam is an integrated game download platform. Steam client suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability

Industrial Light and Magic LIM OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM, USA. A buffer overflow vulnerability exists in the ImfTileOffsets.cpp file in versions of LIM OpenEXR prior to 2.4.1. The vulnerability stems from a networked syst...

DLL Hijacking Vulnerability in Kingview

KingView is the first industrial configuration software product launched by Beijing Asia Control Technology Company in China. Kingview there is a DLL hijacking vulnerability hijacking vulnerability, attackers can use the vulnerability to load the DLL file for command execution...

Flush Love Fund suffers from dll hijacking vulnerability

Flush Love Fund is a software with fund quotes query, earnings ranking, comprehensive ratings of major institutions, fund trading, support for online fund buying and selling and other functions. Flush Love Fund has a dll hijacking vulnerability that can be exploited by attackers to execute...

Baidu.com disk has dll hijacking vulnerability

Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered mainstream PC and cell phone operating systems. A dll hijacking vulnerability exists in Baidu.com, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

2345 Haozhu is vulnerable to dll hijacking.

2345 GoodPress is a compressed file manager. 2345 Haozui has a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

DLL Hijacking Vulnerability in Driver Wizard

Driver Wizard is a set of driver management and hardware detection in one, professional-grade driver management and maintenance tools. Driver Wizard suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

Tencent Computer Management has a dll hijacking vulnerability

Tencent PC Butler is a free security software from Tencent. Tencent Computer Manager has a dll hijacking vulnerability, which can be exploited by attackers to load untrustworthy dynamic link libraries for command execution...

Xunlei X is vulnerable to dll hijacking

Xunlei X is an Internet download tool software developed by Xunlei Corporation. Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

Tencent's Allk Song suffers from DLL hijacking vulnerability

Tencent National K Song is a karaoke software produced by Tencent, with various functions such as intelligent scoring, professional mixing, friends ring, fun interaction and social sharing. Tencent All K Song has a DLL hijacking vulnerability that can be exploited to load untrusted dynamic link...

Fast Pressure is vulnerable to dll hijacking

QuickPress is a very convenient and useful compression and decompression software. A dll hijacking vulnerability exists in Crypto, which can be exploited to load untrusted dynamic link libraries for command execution...

Cool Music is vulnerable to dll hijacking

Cool Music is an online digital music platform. A dll hijacking vulnerability exists in CoolMusic, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

QQ is vulnerable to dll hijacking

QQ is an Internet-based instant messaging IM software. QQ suffers from a dll hijacking vulnerability, which can be exploited to load untrusted dynamic link libraries for command execution...

Tencent QQ Music suffers from dll hijacking vulnerability

Tencent QQ Music is an online music service product launched by Tencent. Tencent QQ Music suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

QQ Browser installation is vulnerable to dll hijacking

QQ Browser is an extremely fast browser developed by Tencent, which supports multiple terminals such as PC, Android and Apple. QQ Browser installation suffers from a dll hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

Privilege Escalation

redhat directory server is vulnerable to privilege escalation. It was found that multiple scripts shipped with Red Hat Directory Server set the LDLIBRARYPATH environment variable to an insecure value containing an empty path. A local user able to trick a user running those scripts usually the roo...

Privilege Escalation

rgmanager is vulnerable to privilege escalation. The vulnerability exists as it was discovered that certain resource agent scripts set the LDLIBRARYPATH environment variable to an insecure value containing empty path elements. A local user able to trick a user running those scripts to run them...

Denial Of Service (DoS)

glibc is vulnerable to privilege escalation. It was discovered that the glibc dynamic linker/loader did not handle the $ORIGIN dynamic string token set in the LDAUDIT environment variable securely. A local attacker with write access to a file system containing setuid or setgid binaries could use...

Privilege Escalation

glibc is vulnerable to privilege escalation. The vulnerability exists as it was discovered that the glibc dynamic linker/loader did not perform sufficient safety checks when loading dynamic shared objects DSOs to provide callbacks for its auditing API during the execution of privileged programs. ...