15 matches found
NixImports
NixImports Un cargador de malware .NET, que utiliza API-Hashing e invocación dinámica para evadir el análisis estático ¿Cómo funciona? NixImports utiliza mi implementación gestionada de API-Hashing, HInvoke, para resolver dinámicamente la mayoría de sus funciones llamadas en tiempo de ejecución...
CVE-2026-26306
The installer for OM Workspace Windows Edition Ver 2.4 and earlier insecurely loads Dynamic Link Libraries DLLs, which could allow an attacker to execute arbitrary code with the privileges of the user invoking the installer...
PT-2026-27641
Name of the Vulnerable Software and Affected Versions OM Workspace versions 2.4 and earlier Description The installer for OM Workspace Windows Edition insecurely loads Dynamic Link Libraries DLLs. This could allow an attacker to execute arbitrary code with the privileges of the user running the...
CVE-2025-64695
Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...
PT-2025-47671
Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description An issue exists in the LogStare Collector installer for Windows that involves an uncontrolled search path element. Successful exploitation of this issue could allow for arbitrary...
CVE-2023-43547 Use After Free in Automotive Multimedia
Memory corruption while invoking IOCTLs calls in Automotive Multimedia...
CVE-2023-22668
Memory Corruption in Audio while invoking IOCTLs calls from the user-space...
NixImports - A .NET Malware Loader, Using API-Hashing To Evade Static Analysis
A .NET malware loader, using API-Hashing and dynamic invoking to evade static analysis How does it work? NixImports uses my managed API-Hashing implementation HInvoke, to dynamically resolve most of it's called functions at runtime. To resolve the functions HInvoke requires two hashes the typeHas...
CVE-2021-37084: Improper Input Validation
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...
USN-4988-1 imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...
USN-3458-1: ICU vulnerability
It was discovered that ICU incorrectly handled certain inputs. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...
pam: pam_namespace executes namespace.init with service's environment
pamnamespace.c in the pamnamespace module in Linux-PAM aka pam before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pamnamespace PAM...
OpenJDK Proxy mechanism information leaks (6801071)
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
Ubuntu Update for icu vulnerabilities USN-591-1
Ubuntu Update for Linux kernel vulnerabilities USN-591-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for icu vulnerabilities USN-591-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
