1423 matches found
CVE-2020-7260
DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...
ABB DriveSize suffers from a dll hijacking vulnerability
DriveSize is a selection program that helps users to select optimized low-voltage motor, rectifier and inverter solutions. ABB DriveSize suffers from a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute malicious code...
CVE-2020-8470
Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability...
PowerSploit1
This is a PowerShell module for code execution and antivirus bypass. The module contains several functions, including: 1. Find-AVSignature: This function locates tiny AV signatures using the same method as DSplit from "class101" on heapoverflow.com. 2. Invoke-DllInjection: This function injects a...
Racer Live Companion installer suffers from dll hijacking vulnerability
Racer Live Companion is a live broadcasting aid based on Racer Open. There is a dll hijacking vulnerability in the installer of Racer Live Companion. Attackers can use the vulnerability to load malicious dll and execute malicious code...
Kingsoft Wordmaster has a dll hijacking vulnerability
Kingsoft Wordsmith is a translation and foreign language learning software developed by Zhuhai Kingsoft Office Software Co. A dll hijacking vulnerability exists in the Kingsoft wordmaster installer. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
Kingsoft PDF is vulnerable to dll hijacking
Kingsoft PDF is a PDF file format for reading and processing tools, but also an important component of WPS. Kingsoft PDF has a dll hijacking vulnerability when processing pdf files. Attackers can use the vulnerability to load malicious dll, the execution of malicious code...
DLL Hijacking Vulnerability in Cisco Webex Meetings
Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. Cisco Webex Meetings suffers from a DLL hijacking vulnerability that can be exploited by an attacker to compromise a user via a crafted DLL...
Baidu.com PC client suffers from Dll hijacking vulnerability
Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered the mainstream PC and cell phone operating systems, including Web version, Windows version, Mac version, Android version, iPhone version and Windows Phone version. Users will be able to easily upload...
Tencent Document Dll Hijacking Vulnerability
Tencent Document is an online document that allows for multi-person collaboration. Tencent Document has a Dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute arbitrary code...
Dll Hijacking Vulnerability in Arigatou Cloud Collaboration
Youdao Cloud Collaboration is a team collaboration tool based on data management and communication launched by Beijing NetEase Youdao Computer System Co. Ltd, which is seamlessly connected to personal notes. There is a Dll hijacking vulnerability in Youdao Cloud Collaboration, which can be...
Baidu Pinyin Input Method Exploits Dll Hijacking Vulnerability
Baidu Pinyin Input Method is a Chinese pinyin input method software under Baidu. Baidu Pinyin Input Method suffers from a Dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...
QQ Music PC client suffers from Dll hijacking vulnerability
QQ Music, part of Tencent Music Entertainment Group, is a music streaming player that supports both online and local music playback, and is the richest music platform in China. A Dll hijacking vulnerability exists in the QQ Music PC client, which can be exploited by attackers to load a malicious...
Tencent PC Butler Desktop Organizer Standalone Edition suffers from Dll Hijacking Vulnerability
Tencent Desktop Organizer is a practical desktop plug-in belonging to Computer Butler, which can also be installed as standalone software, including one-click desktop organizer, file search, disk mapping, file classification and magic mirror wallpaper. Tencent computer butler desktop organizer...
Dll Hijacking Vulnerability in Thousand Music PC Client
Thousand Music is part of Taihe Music Group under Baidu, and is one of the music portals in China. Thousand Music Client is a music playback software under Thousand Music that supports a variety of audio formats, has a new audio engine developed independently, and combines playback, sound effects...
CVE-2020-8810
An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path traversal. This allows the attacker exploiting CVE-2020-8809 to send executable files and place them i...
Sogou Input Method of Beijing Sogou Information Service Co.
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. Sogou Input Method has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...
Cheetah Mobile's Cheetah Browser suffers from dll hijacking vulnerability
Cheetah Browser is an easy-to-use browsing service that will bring you convenient help in a short period of time. Cheetah Mobile's Cheetah Browser has a dll hijacking vulnerability that can be exploited by attackers to cause a user's computer to be remotely controlled or implanted with a Trojan...