Lucene search
+L

456 matches found

OSV
OSV
added 2025/12/30 7:15 p.m.10 views

CVE-2025-66835

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context...

7.1CVSS6.2AI score0.00162EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/30 12:00 a.m.52 views

CVE-2025-66835

CVE-2025-66835 affects TrueConf Client 8.5.2. The vulnerability is a DLL hijacking issue triggered by a crafted wfapi.dll, enabling a local attacker to execute arbitrary code within the user’s context. Impact is confined to the user’s privileges/context as described; no in-wild exploitation detai...

7.1CVSS7.3AI score0.00162EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.4 views

CVE-2023-53973 Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module

Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories,...

8.5CVSS6.7AI score0.00245EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2025/12/22 12:00 a.m.188 views

📄 HEUR.Backdoor.Win32.Poison.gen MVID-2025-0701 DLL Hijacking

HEUR.Backdoor.Win32.Poison.gen malware looks for and executes a x32-bit "WININET.dll" PE file in its current directory. Therefore, we can hijack the DLL and execute our own c ode to intercept and terminate the malware. It is suggested that RansomLordNG be leveraged for this purpose. Discovery /...

7.1AI score
SaveExploits0
NVD
NVD
added 2025/12/19 9:15 p.m.13 views

CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS0.00841EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/19 9:15 p.m.15 views

UBUNTU-CVE-2023-53959

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS6.5AI score0.00841EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/19 9:05 p.m.41 views

CVE-2023-53959 FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...

9.8CVSS0.00841EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.18 views

FileZilla 代码问题漏洞

FileZilla is an open source FTP/SFTP client for Windows-based platforms. A code issue vulnerability exists in FileZilla Client version 3.63.1, which stems from a DLL hijacking vulnerability that could lead to remote code execution...

9.8CVSS7.6AI score0.00841EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/18 7:57 p.m.35 views

CVE-2023-53937 Hubstaff 1.6.14 DLL Search Order Hijacking via wow64log Library

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

8.5CVSS0.00219EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/12/11 2:54 p.m.12 views

CVE-2025-12046

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...

8.5CVSS7AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/10 4:09 p.m.44 views

CVE-2025-34417 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00167EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/10 4:09 p.m.3 views

CVE-2025-34417 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS7.1AI score0.00167EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/10 4:09 p.m.6 views

CVE-2025-34416 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS7.1AI score0.00167EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/10 4:09 p.m.45 views

CVE-2025-34416 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00167EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/10 4:08 p.m.45 views

CVE-2025-34424

MailEnable (Windows) versions prior to 10.54 are affected by an unsafe DLL loading issue where the administrative executable loads MEAIDP.DLL from the installation directory without proper integrity checks or a secure search order. This allows a local attacker with write access to that directory ...

8.5CVSS7AI score0.00164EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/10 4:07 p.m.3 views

CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS7AI score0.00164EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/10 2:08 p.m.11 views

EUVD-2025-202423

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...

8.5CVSS6.5AI score0.00132EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 6:11 p.m.3 views

CVE-2025-34396 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAINFY.DLL from its application directo without sufficient integrity validation or secure search order. If the...

8.5CVSS7.3AI score0.00188EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/09 6:11 p.m.38 views

CVE-2025-34396 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAINFY.DLL from its application directo without sufficient integrity validation or secure search order. If the...

8.5CVSS0.00188EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/09 3:50 p.m.41 views

CVE-2025-5470 Dylib Hijacking in Yandex Disk

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275...

8.8CVSS0.00172EPSS
SaveExploits0References1
Rows per page
Query Builder