Winhex Editor DLL Hijacking Vulnerability

Winhex Editor is a data processing tool centered on a hexadecimal editor. Winhex Editor suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to compromise an affected application and obtain sensitive information by replacing a forged .whx or .whs file with a malicious...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access from the administrator’s perspective

The vulnerability of the Windows operating system is related to incorrect access control. Exploiting this vulnerability can allow a local attacker to gain access from the administrator through a specially crafted DLL library...

CVE-2016-4526

ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory...

ABB DataManagerPro DLL Local Code Execution Vulnerability

ABB DataManagerPro is a data analysis software package from ABB Switzerland. The software allows automatic data collection via Ethernet and database management. ABB DataManagerPro has a local code execution vulnerability. This vulnerability can be exploited by a local attacker to gain privileges ...

Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite

Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...

Foxit Reader and PhantomPDF DLL Load Remote Command Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A remote command execution vulnerability exists in the loading of the Foxit Reader and PhantomPDF DLLs, which could be exploited by an attacker ...

IBM Tivoli Storage Manager DLL Load Local Command Execution Vulnerability

IBM Tivoli Storage Manager TSM is a backup and recovery management solution from IBM USA. The solution supports data protection, space management and archiving, business recovery and disaster recovery. A security vulnerability in IBM Tivoli Storage Manager allows an attacker to execute arbitrary...

WordPress Link Library Plugin <= 5.9.12.29 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Link Library 5.9.12.29 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Link Library WordPress Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016 ------------------------------------------------------------------------...

Link Library <= 5.9.12.29 - Authenticated Reflected Cross-Site Scripting (XSS)

The Link Library WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

VMware Workstation 12.1.x < 12.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Workstation installed on the remote host is 12.1.x prior to 12.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the current...

VMware Fusion 8.1.x < 8.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Fusion installed on the remote Mac OS X host is 8.1.x prior to 8.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the curre...

CVE-2016-5330

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

PuTTY Elevation of Privilege Vulnerability

PuTTY is a free Telnet, Rlogin and SSH client software developed by software developer Simon Tatham. The software is mainly used for remote administration of Linux systems. An elevation of privilege vulnerability exists in PuTTY beta 0.67. A local attacker can use a specially crafted DLL file to...

Huawei HiSuite Arbitrary Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An arbitrary code execution vulnerability exists in Huawei HiSuite 4.0.3.301 and earlier versions, which originates from the program failing to properly load a DLL file. A local attacker can exploit this...

CVE-2016-4528

Buffer overflow in Advantech WebAccess before 8.120160519 allows local users to cause a denial of service via a crafted DLL file...

Google Go untrustworthy search path vulnerability

Google Go is a programming language optimized for programming applications on multiprocessor systems by Google. An untrusted search path vulnerability exists in Google Go versions prior to 1.5.4 and 1.6.1 prior to 1.6.x for Windows platforms. A local attacker can exploit this vulnerability to gai...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Huawei 3G/LTE Local Privilege Vulnerability

Huawei 3G/LTE is a router product from Huawei, a Chinese company. A local elevation of privilege vulnerability exists in the 'Mobile Broadband HL Service' service of Huawei 3G/LTE, which originates from a folder corresponding to the service that allows users to add a malicious VERSION.dll file. T...

The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges

The vulnerability of the Internet Explorer browser is related to errors during the loading of DLLs. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...