LNK Code Execution Vulnerability

This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 CVE-2015-0096. The created LNK file is similar except an additional SpecialFolderDataBlock is included. The...

vmware horizon client dll hijacking vulnerability

Horizon Client is used to virtualize desktops and applications. A DLL hijacking vulnerability exists in the vmware horizon client, which could allow an attacker to maliciously load a DLL and execute arbitrary commands by constructing a malicious application and placing it in a specific path...

LAquis SCADA dll Hijacking Vulnerability

LAquis SCADA is the tool and language for data collection, process supervision, industrial automation, storage and report generation for quality management and application development. LAquis SCADA suffers from a dll hijacking vulnerability. The vulnerability is caused due to the LAquis SCADA...

China Knowledge CAJViewer reader suffers from dll hijacking vulnerability

China Knowledge CAJViewer Reader is a specialized full-text format reader for China Journal Network. China Knowledge CAJViewer Reader has a dll hijacking vulnerability, the vulnerability is due to China Knowledge CAJViewer Reader CAJVieweru.exe component is not safe to load the library file, an...

Vivaldi 1.4.589.11 DLL Hijacking

Exploit Title: Vivaldi browser DLL Hijacking Author: Ashiyane Digital Security Team Vendor Homepage: https://vivaldi.com/ software link: https://downloads.vivaldi.com/stable/Vivaldi.1.4.589.11.exe Tested on:Windows 7 Date: 13-09-2016...

Adobe Reader 9.3.0 DLL Hijacking

===================================================== Adobe Reader 9.3.0 - DLL Hijacking ===================================================== Vendor Homepage: https://www.adobe.com/ Date: 24 Oct 2016 Version : 9.3.0 Author: Ashiyane Digital Security Team Contact: [email protected]...

Hotspot Shield DLL Hijacking

Exploit Title: Hotspot Shield DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com/ Software Link: https://mydati.com/download/hss-win2/HSS-773.exe Version: Tested on:Windows 7...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure.

The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created DLL file...

f.lux DLL Hijacking

Aloha, f.lux suffers from a DLL hijacking vulnerability. "flux-setup.exe" loads and executes dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and...

InstantHMI 6.1 Privilege Escalation

itle: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program,...

New Irongate ICS Malware Steals From Stuxnet Playbook

New malware that targets industrial control systems called Irongate was found by researchers who say the discovery should serve as another wakeup call to the security industry to shore up its detection capabilities around ICS and SCADA threats. Irongate, which shares some of the same attributes a...

PT-2016-5778 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.5.4 Go versions 1.6.x prior to 1.6.1 Description: The issue is related to an untrusted search path vulnerability, allowing local users to gain privileges via a malicious DLL in the current working directory. This is due...

IDA SDK 6.9 Demo / IDA 5.0 Freeware DLL Hijacking

Software : Interactive DisAssembler IDA PRO Version: = IDA SDK 6.9 demo IDA 5.0 Freeware Software Link: https://www.hex-rays.com/products/ida/support/download.shtml Tested on: WINDOWS XP SP3 - 32 bit, WINDOWS 7 SP1 - 32 bit, Windows 8.1 32 bit IDA Pro suffers from DLL HIJACK Vulnerability from .i...

JPEGSnoop 1.7.3 DLL Hijacking

Software : JPEGSnoop Software Link: https://sourceforge.net/projects/jpegsnoop/ Version: LPORT=4444 JPEGSnoopENU.dll Exploit: Place a dummy or original JPEG file having .jpeg extension file with the malicious dll. When the file is opened in JPEGSnoop you can get machines access and even the shell...

Algobox 0.9 DLL Hijacking

Exploit Title: ALGOBOX DLL HIJACKING VULNERABILTY Date: FEB 14 2016 Exploit Author: SHANTANU KHANDELWAL Vendor Homepage: http://www.xm1math.net Software Link: http://www.xm1math.net/algobox/algoboxwin32install.exe Version: LPORT=4444 quserex.dll Exploit: Place a dummy .alg file with the malicious...

Texmaker 4.5 DLL Hijacking

Exploit Title: TEXMAKER DLL HIJACKING VULNERABILTY Date: FEB 14 2016 Exploit Author: SHANTANU KHANDELWAL Vendor Homepage: http://www.xm1math.net Software Link: http://www.xm1math.net/texmaker/texmakerwin32install.exe Version: LPORT=4444 quserex.dll Exploit: Place a dummy .tex file with the...

Winhex Editor 18.7 DLL Hijacking

Exploit Title: WINHEX EDITOR DLL HIJACKING VULNERABILTY Date: JAN 28 2016 Exploit Author: SHANTANU KHANDELWAL Vendor Homepage: www.winhex.com Software Link: http://www.winhex.com/winhex.zip Version: LPORT=4444 mssvp.dll Exploit: Place a dummy .whx or .whs file with the malicious dll . When the...

Outlook Web Access Targeted Attack

Attackers aiming for lateral movement inside an enterprise network have done well in the past to target domain controller credentials. Researchers at Cybereason, however, have uncovered a targeted attack in which hackers were able to burrow onto the corporate network and steal thousands of...

Symantec Endpoint Protection DLL Load Arbitrary Code Execution Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection loads DLLs with a security vulnerability that allows an attacker to construct a malicious DLL, place it on a network share or in a speci...

Microsoft Windows Shell File Format LNK Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...