PT-2020-20231

Name of the Vulnerable Software and Affected Versions Trend Micro Vulnerability Protection version 2.0 Description The issue allows an attack to use the product installer to load other DLL files located in the same directory. Recommendations For Trend Micro Vulnerability Protection version 2.0,...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-8096

Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204...

Web containers Netweaver Application Server Java unlimited file upload

The vulnerability of Web containers in Netweaver Application Server Java applications is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a malicious actor to remotely upload malicious files...

UPM doesn't work randomly after VDA is rebooted

Intermittently UPM profile does not load, if user login immediately after the reboot...

Fix Microsoft Outlook When Stuck on Loading Profile

By Owais Sultan Read this article and fix your Outlook which is stuck on the loading profile screen. This is a post from HackRead.com Read the original post: Fix Microsoft Outlook When Stuck on Loading Profile...

CVE-2019-16413

A flaw was found in the implementation of the 9p filesystem in the Linux kernel. The 9p filesystem does not protect isizewrite properly, which causes an isizeread infinite loop. An attacker, able to mount a specially crafted filesystem, could cause a denial of service on SMP systems. Mitigation A...

Foxit PDF Editor DLL Hijacking Vulnerability

Foxit PDF Editor is a PDF file editing software. Foxit PDF Editor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...

CVE-2013-3942

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

Remote code execution

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

CVE-2013-3942

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

CVE-2013-3942

CVE-2013-3942 affects PotPlayer prior to 1.5.39659. The vulnerability is a DLL loading Arbitrary Code Execution vulnerability rooted in the way the player loads DLLs. Public references in the connected documents describe the impact as arbitrary code execution, with an indication of potential expl...

CVE-2013-3942: Untrusted Search Path

Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...

PT-2020-7472

Name of the Vulnerable Software and Affected Versions: Potplayer versions prior to 1.5.39659 Description: The issue allows for arbitrary code execution due to a DLL loading vulnerability. Recommendations: For versions prior to 1.5.39659, update to version 1.5.39659 or later to resolve the issue...

Integer overflow

Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...

CVE-2019-14051: Integer Overflow or Wraparound

Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...

PT-2020-9478

Name of the Vulnerable Software and Affected Versions: Snapdragon Industrial IOT versions in MDM9206, MDM9607 Description: The issue arises during module loading when allocating memory, leading to an integer overflow that results in a buffer overflow. Recommendations: For Snapdragon Industrial IO...

Abusing DLL Misconfigurations — Using Threat Intelligence to Weaponize R&D

DLL Abuse Techniques Overview Dynamic-link library DLL side-loading occurs when Windows Side-by-Side WinSxS manifests are not explicit about the characteristics of DLLs being loaded by a program. In layman’s terms, DLL side-loading can allow an attacker to trick a program into loading a malicious...