CVE-2025-10213

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\AppData\Local\Microsoft\WindowsApps' directory, which could lead to arbitrary...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-9201

CVE-2025-9201 corresponds to a DLL hijacking vulnerability in Lenovo Browser that could allow a local user to execute code with elevated privileges. Connected sources explicitly reference Lenovo Browser and describe the issue as a local privilege escalation via DLL hijacking, but they do not prov...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-10198

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...

CVE-2025-7970

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise...

Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts

Cybersecurity researchers have disclosed two new campaigns that are serving fake browser extensions using malicious ads and fake websites to steal sensitive data. The malvertising campaign, per Bitdefender, is designed to push fake "Meta Verified" browser extensions named SocialMetrics Pro that...

CVE-2025-9059

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059

CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

Exploit for CVE-2024-32019

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Sum...

Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software from Broadcom Corporation USA that manages the configuration of repair applications and operating systems. A security vulnerability exists in Broadcom Symantec IT Management Suite that stems from vulnerability to DLL hijacking attacks that could...

Rockwell Automation FactoryTalk Activation Manager Data Exposure Vulnerability

Rockwell Automation is a leading global provider of industrial automation and control solutions focused on helping companies achieve smart manufacturing and digital transformation. A data disclosure vulnerability exists in Rockwell Automation FactoryTalk Activation Manager, which can be exploited...

Rockwell FactoryTalk Activation Manager 5.x < 5.02 Information Disclosure

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is 5.x prior to 5.02. It is, therefore, affected by an information disclosure vulnerability. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. Thi...

PT-2025-37261

Name of the Vulnerable Software and Affected Versions: Lenovo Browser affected versions not specified Description: A potential DLL hijacking issue was identified in Lenovo Browser. This could allow a local user to execute code with elevated privileges. Recommendations: At the moment, there is no...

PT-2025-37114

Name of the Vulnerable Software and Affected Versions: Altiris Core Agent Updater affected versions not specified Description: The Altiris Core Agent Updater package AeXNSC.exe is susceptible to an elevation of privileges issue due to DLL hijacking. Recommendations: At the moment, there is no...

CVE-2025-10215

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\Public\AppData\Local\UPDF\FREngine\Bin64' directory, which could lead to...

CVE-2025-10215 DLL search path hijacking vulnerability

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\Public\AppData\Local\UPDF\FREngine\Bin64' directory, which could lead to...