Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•23 views

PT-2025-44631

Name of the Vulnerable Software and Affected Versions Trimble SketchUp desktop version 2025 Description A DLL hijacking issue exists in Trimble SketchUp desktop 2025. This occurs due to a crafted libcef.dll file being used by sketchup webhelper.exe. An attacker could potentially leverage this to...

7.8CVSS7AI score0.00146EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/10/31 12:00 a.m.•8 views

CVE-2025-60749

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...

6.6AI score0.00146EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•1 views

CVE-2025-60749: Uncontrolled Search Path Element

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...

7.8CVSS5.8AI score0.00146EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•15 views

Trimble SketchUp Desktop 安全漏洞

Trimble SketchUp Desktop is a 3D modeling software from Trimble USA. A security vulnerability exists in Trimble SketchUp Desktop 2025, which stems from sketchupwebhelper.exe's use of a specially crafted libcef.dll, which could lead to a DLL hijacking attack...

7.8CVSS6.5AI score0.00146EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/08/25 1:12 p.m.•6 views

Malicious Package

Overview termncolor is a malicious package. This package is part of a multi-stage attack and its content was removed from the official package manager. The attack utilizes a seemingly harmless package to introduce a malicious dependency. The goal of this attack is to gain remote code execution on...

9.8CVSS8AI score
SaveExploits0References3
The Hacker News
The Hacker News
•added 2024/02/09 10:28 a.m.•48 views

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote. "This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/10 12:00 a.m.•2 views

CVE-2022-47636: Uncontrolled Search Path Element

A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file OutSystems Modeling Language, the application will load the following DLLs from the same directory avlibGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using...

7.8CVSS7.4AI score0.01281EPSS
SaveExploits4References2
Rows per page
Query Builder