IBM i Access for Windows Untrustworthy Search Path Vulnerability

IBM i Access for Windows is a suite of client solutions from IBM in the United States that provide access to and use of desktop resources from a variety of different Windows operating systems. An untrusted search path vulnerability exists in IBM i Access for Windows version 7.1, which can be...

CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

DLL Hijacking Vulnerability in siemens TD Keypad Designer

TD Keypad Designer is siemens' specialized keyboard designer for TD 100C , TD 200C , TD 400C . siemens TD Keypad Designer V1.0.9.25 suffers from a DLL hijacking vulnerability when processing td1 files, which can be exploited by attackers to load a malicious dll and execute malicious code...

LOGICOOL Game Software untrustworthy search path vulnerability

LOGICOOL Game Software is a set of game device management software from the Swedish company LOGICOOL. The software is used to manage devices such as mice, keyboards, headsets and speakers. An untrusted search path vulnerability exists in LOGICOOL Game Software versions prior to 8.87.116, which ca...

Microsoft OneDrive untrustworthy search path vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. An untrustworthy search path vulnerability exists in Microsoft OneDrive. An attacker can exploit this vulnerability with a malicious DLL in t...

Microsoft Skype for Windows Untrustworthy Search Path Vulnerability

Microsoft Skype for Windows is a set of instant messaging software based on the Windows platform from Microsoft. The program supports video chat, multi-person chat and file transfer. An untrusted search path vulnerability exists in Microsoft Skype for Windows. An attacker can exploit this...

CVE-2017-7755

The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating syste...

Sony PlayMemories Home for Windows installer untrustworthy search path vulnerability

Sony PlayMemories Home for Windows is a Windwos-based image management application from Sony Japan. installer is the installer for PlayMemories Home. An untrusted search path vulnerability exists in the installer in PlayMemories Home 5.5.01 and earlier versions for Windows. An attacker can exploi...

ESTsoft ALZip Arbitrary Code Execution Vulnerability

ESTsoft ALZip is a compression tool from ESTsoft Korea. A security vulnerability exists in ESTsoft ALZip versions prior to 10.76. The vulnerability can be exploited by a local attacker to execute arbitrary code by creating a malicious .DLL file and installing it in a specific path...

Design/Logic Flaw

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code...

SoundEngine Free Installer Untrustworthy Search Path Vulnerability

SoundEngine Free is a suite of software for voice recording and audio editing for the Windows platform.Installer is its installation program. An untrusted search path vulnerability exists in the Installer in SoundEngine Free 5.21 and earlier versions. An attacker can exploit this vulnerability to...

Jtrim Untrusted Search Path Vulnerability

Jtrim is a Windows-based image processing tool. An untrustworthy search path vulnerability exists in Jtrim 1.53c and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...

Flets Azukeru for Windows Auto Backup Tool Untrusted Search Path Vulnerability

Flets Azukeru for Windows Auto Backup Tool is a Windows-based Flets Azukeru auto backup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Flets Azukeru for Windows Auto Backup Tool 1.0.3.0 and earlier versions. A remote attacker can exploit thi...

Qtouch General Edition is vulnerable to an untrustworthy code loading flaw

Qtouch General Purpose Edition is automation software that integrates the functions of device communication, graphic display, data conversion, logic processing, etc. and provides secondary development. Qtouch Universal Edition is vulnerable to an untrustworthy code loading flaw. The attacker...

Input validation

An untrusted search path aka DLL Preloading vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory wher...

Anti-Virus Privileged File Write Vulnerability

Anti-Virus solutions are split into several different components an unprivileged user mode part, a privileged user mode part and a kernel component. Logically the different systems talk to each other. By abusing NTFS directory junctions it is possible from the unprivileged user mode part "the UI"...

Microsoft Windows LNK File Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LNK Code Execution Vulnerability', 'Description' = %q This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that...

Hitachi HIBUN Confidential File Decryption Program Untrustworthy Search Path Vulnerability (CNVD-2017-30835)

Hitachi HIBUN Confidential File Decryption program is a set of confidential file confidentiality program from Hitachi Solutions Japan. An untrustworthy search path vulnerability exists in Hitachi HIBUN Confidential File Decryption program versions prior to 10.50.0.5. The vulnerability can be...

Digital Arts i-filter untrustworthy search path vulnerability

Digital Arts i-filter is a parental control web filter from Digital Arts Japan. installer is one of the installers. An untrusted search path vulnerability exists in the installer of Digital Arts i-filter version 6.0. The vulnerability can be exploited to gain privileges via a malicious DLL in the...

Lhaz+ untrustworthy search path vulnerability

Lhaz+ is a compression/decompression tool. installer is one of the installers. An untrusted search path vulnerability exists in the installer in Lhaz+ 3.4.0 and earlier versions. A remote attacker can exploit this vulnerability to gain privileges with a malicious DLL in the directory...