CVE-2019-20076

CVE-2019-20076 concerns the Netis DL4323 modem, where a stored/reflected cross-site scripting (XSS) vulnerability exists in the DynDns settings page due to the username parameter in form2Ddns.cgi. The issue stems from insufficient input validation in the WEB application, enabling an attacker to i...

Choice Financial Terminal - PC Version has dll Hijacking Vulnerability

Choice Financial Terminal is a financial data analysis and investment management software. Choice Financial Terminal-PC version has a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...

OpenBSD Dynamic Loader chpass Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenBSD Dynamic Loader chpass Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the OpenBSD ld.so dynamic loader...

Dll Hijacking Vulnerability in Express

FlashGet is an old-school download tool. FlashGet has a dll hijacking vulnerability that can be exploited by attackers to load malicious dlls and execute malicious code...

Dll hijacking vulnerability exists in Sokrat

Sokrat a FLV video download software. A dll hijacking vulnerability exists in Sokrat. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Malwinx - Just A Normal Flask Web App To Understand Win32Api With Code Snippets And References

A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it pip install flask pip install pefile pip install requests Usage $ python flaskapp.py Live Demo Here is the Walkthrough: 1. Upload the exe or dll. ...

QQ Image is vulnerable to DLL hijacking

QQ Image is the latest desktop image processing software from Tencent. QQ Image has a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

Good Pressure is vulnerable to DLL hijacking

Good Pressure is a completely free new generation of compression software under 2345. Goodpress has a dll hijacking vulnerability, which can be exploited by attackers to load malicious dlls and execute malicious code...

2345 Viewer is vulnerable to dll hijacking.

2345 Picture Viewer is a powerful picture browsing and management software promoted by Shanghai 2,3,4,5 Network Technology Co. It fully supports browsing, management and editing of all major image formats. There is a dll hijacking vulnerability in 2345 Photo King, which can be exploited by...

DLL Hijacking Vulnerability in Weinview EasyBuilder Pro

EasyBuilder Pro is a screen editing software from Valiant Technology. A DLL hijacking vulnerability exists in Weinview EasyBuilder Pro, which can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in Weinview EasyWatch

EasyWatch is a tool for debugging or remote monitoring. Weinview EasyWatch suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...

2345 Website Navigation Desktop Edition is vulnerable to dll hijacking.

2345 Website Navigation Desktop Edition is a desktop navigation and management tool promoted by Shanghai 2-3-4-5 Network Technology Co. It has the functions of one-click quick access to 2345, quick creation of mini-notes, desktop calendar and so on. There is a dll hijacking vulnerability in...

DLL Hijacking Vulnerability in 2345 Ace Input Method

2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2-3-4-5 Mobile Technology Co. 2345 Ace Input Method has a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

2345 PDF Reader suffers from DLL hijacking vulnerability

2345 PDF Reader is a PDF file viewer software. 2345 PDF Reader has a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

Extreme View has a DLL hijacking vulnerability

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. There is a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

DLL Hijacking Vulnerability in Meitu Look

Meitu Look is a picture viewing software from Meitu.com. A DLL hijacking vulnerability exists in Mito Look, which can be exploited by an attacker to load a malicious dll and execute malicious code...

DLL Hijacking Vulnerability in Weinview EasyConverter

Weinview EasyConverter is a tool to convert event logs and data sampling records to files. Weinview EasyConverter suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...

ABB PB610 Panel Builder 600 PB610 HMIStudio DLL Parsing Vulnerability

ABB PB610 Panel Builder 600 is a software for designing graphical user interfaces for the CP600 control panel platform. A security vulnerability in the ABB PB610 Panel Builder 600 PB610 HMIStudio component parsing DLL allows remote attackers to exploit the vulnerability by submitting a special fi...

Xen Project Dynamic Height Handling Elevation of Privilege Vulnerability (XSA-311)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability or possibly an elevation of privilege vulnerability by triggering data-structure access during pagetable-height updates. An unauthenticated, local attack...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01583)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial of service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...