CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Industrial Light And Magic OpenEXR 缓冲区错误漏洞

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to authentication process errors, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to authentication process errors. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code in the...

The vulnerability of the Google Chrome web browser’s user interface allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome web browser’s user interface is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Setup Dynamic Update for Windows 10, version 2004 and 20H2: December 8, 2020

None None...

Baphomet - Basic Concept Of How A Ransomware Works

This is a proof of concept of how a ransomware works, and some techniques that we usually use to hijack our files. This project is written in C using the net-core application framework 3.1.The main idea of the code is to make it as readable as possible so that people have an idea of how this type...

There is a dll hijacking vulnerability in Youdao Dictionary pc side

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology produced by NetEase Youdao. A dll hijacking vulnerability exists in Youdao Dictionary pc, which can be exploited by attackers to gain control of the server...

Aurora PDF Reader has a dll hijacking vulnerability (NVD-C-2020-294256)

Aurora PDF Reader is a PDF file viewing software. Aurora PDF Reader has a dll hijacking vulnerability that can be exploited by attackers to load malicious dlls and execute malicious code...

Baidu.com PC client suffers from dll hijacking vulnerability (CNVD-2020-73296)

Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered the mainstream PC and cell phone operating systems, including Web version, Windows version, Mac version, Android version, iPhone version and Windows Phone version. A dll hijacking vulnerability exists i...

Homework Help Live Classes for windows has dll hijacking vulnerability

Homework Help Live Classes is a high-quality online live tutoring product under Homework Help, which covers all subjects of primary, junior high and senior high school grades. There is a dll hijacking vulnerability in the windows version of Homework Help Live Class. Attackers can use this...

Lovecraft pc client suffers from dll hijacking vulnerability

Aqiyi pc client is a client software that focuses on video playback under Aqiyi. There is a dll hijacking vulnerability in Aqiyi pc client, which can be exploited by attackers to execute arbitrary commands...

MangoTV PC client suffers from dll hijacking vulnerability

Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...

Denial Of Service (DoS)

nanopb is vulnerable to denial of service DoS. The vulnerability exists when decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage...

Cool Music (Windows client) suffers from a dll hijacking vulnerability (CNVD-2020-72476)

Cool Music is a music player that serves songs to its users. A dll hijacking vulnerability exists in CoolMusic Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

Lovecraft Universal Link (Windows client) suffers from dll hijacking vulnerability

Aqiyi Universal Link formerly Aqiyi Universal Player is a universal video and audio player produced by Aqiyi in pursuit of the ultimate experience. There is a dll hijacking vulnerability in Aqiyi Universal Media Player Windows client. An attacker can exploit this vulnerability to load a malicious...

Nail (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-72473)

Nail is an intelligent mobile office platform. A dll hijacking vulnerability exists in Nail Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...