Wuhan Douyu Fish Music Network Technology Co., Ltd Douyu Live Companion suffers from dll hijacking vulnerability (CNVD-2021-21511)

Douyu Live Companion is a live streaming software specially developed for the anchors of Douyu. Wuhan Douyu Fish Music Network Technology Co. Douyu Live Companion has a dll hijacking vulnerability, which can be exploited by attackers to execute malicious code and obtain server privileges...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution. An attacker could bypass the Secure Boot mechanism via triggering a memory corruption which allows for malicious code execution...

Directory Traversal

salt is vulnerable to directory traversal. The salt.wheel.pillarroots.write method allows for directory traversal and can potentially lead to malicious code execution...

Remote Code Execution

gramaddict is vulnerable to remote code execution. The usage of UIAutomator2 and ATX-Agent allows an attacker to reach TCP port 7912, subsequently allowing to trigger malicious code execution, e.g., by being on the same Wi-Fi network...

OTRS AG Survey 跨站脚本漏洞

OTRS AG Survey is a Perl-based customer survey appliance from OTRS Germany. The tool is intended for use in sending e-mails to customers after a ticket has been closed. A cross-site scripting vulnerability exists in OTRS AG Survey that can be exploited by an attacker to execute malicious code in...

CentOS 8 : qt5-qtbase and qt5-qtwebsockets (CESA-2020:4690)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4690 advisory. - qt: XML entity expansion vulnerability CVE-2015-9541 - qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12701)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

LuMaster Game Inventory in dll Hijacking Vulnerability

LuMaster Game Library is a game application library software officially launched by LuMaster. LU Master Game Library is vulnerable to dll hijacking. An attacker can exploit this vulnerability to execute malicious code...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12702)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

Lumia Gaming Accelerator has a dll hijacking vulnerability

LuMaster Gaming Accelerator is an official game gas pedal software from LuMaster. There is a dll hijacking vulnerability in LuMaster Gaming Accelerator. Attackers can use this vulnerability to execute malicious code...

M&M Fdtcontainer Code Issue Vulnerability

M&M Fdtcontainer is a plug-and-play FDT framework application that can be customized to meet the needs of customers by China Meiming M&M. A code issue vulnerability exists in M&M fdtCONTAINER component Version 3, which can be exploited by an attacker to load a manipulated project file and malicio...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12703)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

Hi-Format Recording Master is vulnerable to dll hijacking.

Hi Format Screen Recording Master is a screen recording software. Hi Format Screen Recorder client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Programming Cat SourceWise Editor Desktop Client suffers from dll hijacking vulnerability

SourceWise Editor Client is a new hardware programming software from Programming Cat. Programming Cat SourceWise Editor desktop client has a dll hijacking vulnerability. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Microsoft Windows Media Player suffers from dll hijacking vulnerability

Microsoft Windows Media Player is media player that supports a wide range of media formats. A dll hijacking vulnerability exists in Microsoft Windows Media Player. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Beili Live Ji suffers from dll hijacking vulnerability (CNVD-2021-08479)

Beep Live Ji a live broadcasting auxiliary tool. There is a dll hijacking vulnerability in Beili Live Ji. An attacker can exploit this vulnerability to execute malicious code...

Jiajia AVCHD Video Format Converter is vulnerable to dll hijacking.

Jia Jia AVCHD Video Format Converter is an AVCHD digital camcorder video format converter. Jiajia AVCHD Video Format Converter suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Jiajia H264 Video Format Converter is vulnerable to dll hijacking.

Jiajia H264 Video Format Converter is a H.264 encoded video format conversion tool. Jiajia H264 Video Format Converter has a dll hijacking vulnerability. An attacker can use this vulnerability to load a malicious dll and execute malicious code...

Jiajia DAT Video Format Converter is vulnerable to dll hijacking.

Jiajia DAT Video Format Converter is the software to convert DAT format. Jiajia DAT Video Format Converter has a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...