CVE-2023-34312-exp

Disclaimer This project is created only for reproduction experiments. Affected Versions QQ 9.6.2.27855 9.7.11.29088 except QQ 9.7.10, because it does not come with QQProtect.exe apparently TIM 3.4.5.22071 3.4.7.22084 Usage After installing QQ/TIM, place the two malicious DLLs in the same folder a...

CVE-2020-0668

CVE-2020-0668 Implémentation PowerShell utilisant printconfig.dll pour élever les privilèges. evil dll peut être personnalisé ; la dll que j'utilise ici exécute le fichier c:\programdata\setup.bat. Références : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / исследование + PoC Создаём 1 ярлык + 1 .DLL с вредоносной нагрузкой = закидываем на USB и отправляем жертве = жертва открывает USB = нагрузка активируется автоматически! ПЕРВОПРИЧИНА 1. Прежде всего, нам нужно точно знать, из-за чего возникает эта ошибка! Всё дело в функции под...

CVE-2021-1675

PrintNightmare Local Privilege Escalation PoC src/nightmare.cpp: исходный код для эксплуатации CVE-2021-1675 и получения системного доступа путем установки вредоносной DLL src/payload-dll.cpp: исходный код DLL с вредоносным шеллкодом в функции входа !!Используйте только на серверах, на которые у...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

CVE-2024-55347

Divulgation CVE : CVE-2024-55347 Divulgation publique de CVE-2024-55347 🚀 Date : 10-02-2025 Résumé Une vulnérabilité de Binary Planting dans Kroll Artifact Parser And Extractor KAPE v1.3.0.2 permet à des attaquants d'élever leurs privilèges et d'exécuter du code arbitraire en plaçant un fichier...

CVE-2021-1675

Объяснение уязвимости Диспетчер печати Printer Spooler — это служба Windows, управляющая очередями печати. Он получает задания, отправленные пользователем, преобразует их в формат, понятный принтеру, и отправляет, когда принтер становится доступен. Он работает как системная служба spoolsv.exe с...

CVE-2026-9634

CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...

CVE-2026-9633: Incorrect Default Permissions

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

CVE-2026-9169

CVE-2026-9169 describes a DLL search order hijacking issue in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows. An attacker with local access can place a malicious DLL in a user-controlled directory that appears in the PATH the SDK traverses to resolve a dependency, resulting in arbitrary code ex...

CVE-2026-16519 GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

CVE-2026-16519

Vulnerability overview. CVE-2026-16519 affects the GeoVision GV-IP Device Utility desktop application, where it loads DLLs from an unsafe search path. This DLL search order hijacking allows a local attacker to place a malicious DLL in a location that’s searched before the legitimate library, enab...

CVE-2026-32679

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

EUVD-2026-25138

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver BYOVD technique to silence security tools running on compromised hosts, according to findings from Cisco Talos and Trend Micro. Qilin attacks analyzed by Talos have...

CVE-2025-59710

An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the...

CVE-2025-59710

CVE-2025-59710 affects BizTalk360 prior to v11.5. The root cause is improper access control that allows any user to request loading a DLL; during loading, a method is invoked and a malicious DLL uploaded by an attacker can lead to remote code execution on the server. The vulnerability is referenc...

PT-2026-25768

Name of the Vulnerable Software and Affected Versions OpenEDR version 2.5.1.0 Description A local, non-privileged attacker can exploit a vulnerable IOCTL interface exposed by the OpenEDR kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writabl...