CVE-2024-52958 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function...

PT-2024-35499 · Unknown · Iota C.Ai Conversational Platform

Name of the Vulnerable Software and Affected Versions: iota C.ai Conversational Platform versions 1.0.0 through 2.1.3 Description: The issue is related to an improper verification of cryptographic signature vulnerability in plugin management. This allows remote authenticated users to load a...

CVE-2024-52945

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL...

CVE-2024-52945

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL...

CVE-2024-52945

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL...

CVE-2024-9500

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management...

CVE-2024-9500

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management...

Autodesk installer 安全漏洞

Autodesk installer is an installer program from Autodesk USA. A security vulnerability exists in Autodesk installer version 2.10.0.17 and prior versions, which stems from improper privilege management, where a maliciously crafted DLL file placed in temporary files and folders may result in elevat...

Veritas NetBackup Privilege Escalation (VTS24-012)

The version of Veritas NetBackup installed on the remote host is 10.0, 10.0.0.1, 10.1, 10.1.1, 10.2, 10.2.0.1, 10.3, 10.3.0.1, 10.4, or 10.4.0.1. It is, therefore, affected by a vulnerability as referenced in the VTS24-012 advisory. - Veritas NetBackup primary server, media server, and clients...

CVE-2024-50583

CVE-2024-50583 affects Whale browser Installer prior to v3.1.0.0. Root cause: improper permission settings allow an attacker to cause execution of a malicious DLL in the user environment. Impact is limited to the installer component; explicit exploitation details are not provided in the sources. ...

CVE-2024-50583

Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings...

CVE-2024-47045

Privilege chaining issue exists in the installer of e-Tax softwarecommon program. If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege...

PT-2024-32370 · E-Tax · E-Tax

Name of the Vulnerable Software and Affected Versions: e-Tax software affected versions not specified Description: A privilege chaining issue exists in the installer of the e-Tax software, allowing a malicious DLL prepared by an attacker to be executed with higher privileges than the application...

The installer of e-Tax software(common program) vulnerable to privilege escalation

Overview The installer of e-Tax softwarecommon program provided by National Tax Agency contains a vulnerability which allows uploading a malicious DLL to be executed with higher privileges than that of an general user by altering registry CWE-268. Takashi Yoshikawa of Mitsui Bussan Secure...

CVE-2024-20430

CVE-2024-20430 affects Cisco Meraki Systems Manager (SM) Agent for Windows. The issue stems from incorrect handling of directory search paths at runtime, enabling an authenticated, local attacker to read and place malicious configuration files and DLLs that are executed when SM launches at startu...

CVE-2024-41865 Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll

Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate...

APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure

A Russia-linked threat actor has been linked to a new campaign that employed a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. "The campaign likely targeted diplomats and began as early as March 2024," Palo Alto Networks Unit 42 said in a report published...

Dell Peripheral Manager Uncontrolled Search Path Element Vulnerability (CNVD-2024-34485)

Dell Peripheral Manager is an application from Dell USA. It provides on-screen instructions on how to pair other devices with your computer via Bluetooth. An uncontrolled search path element vulnerability exists in Dell Peripheral Manager versions prior to 1.7.6, which can be exploited by an...

Dell Peripheral Manager Uncontrolled Search Path Element Vulnerability (CNVD-2024-34486)

Dell Peripheral Manager is an application from Dell USA. It provides on-screen instructions on how to pair other devices with your computer via Bluetooth. An uncontrolled search path element vulnerability exists in Dell Peripheral Manager versions prior to 1.7.6, which can be exploited by an...

CVE-2024-32857

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link exploitation, leading to arbitrary code execution and escalation of privilege...