CVE-2020-0668

CVE-2020-0668 पॉवरशेल कार्यान्वयन, printconfig.dll का उपयोग करके विशेषाधिकार बढ़ाने के लिए। evil dll को स्वयं परिभाषित किया जा सकता है, यहां मेरी dll c:\programdata\setup.bat फ़ाइल को निष्पादित करेगी। संदर्भ: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

CVE-2024-55347

CVE खुलासा: CVE-2024-55347 CVE-2024-55347 का सार्वजनिक खुलासा 🚀 दिनांक: 10-02-2025 सारांश Kroll Artifact Parser And Extractor KAPE v1.3.0.2 में एक Binary Planting भेद्यता हमलावरों को किसी विशिष्ट निर्देशिका में दुर्भावनापूर्ण रूप से तैयार की गई Binary फ़ाइल रखकर विशेषाधिकार बढ़ाने और मनमाना कोड...

CVE-2023-34312-exp

بيان أُنشئ هذا المشروع فقط لغرض إعادة إنتاج التجارب الإصدارات المتأثرة QQ 9.6.2.27855 9.7.11.29088 باستثناء QQ 9.7.10، لأنه يبدو أنه لا يتضمن QQProtect.exe TIM 3.4.5.22071 3.4.7.22084 طريقة الاستخدام بعد تثبيت QQ/TIM، يجب وضع ملفي dll الخبيثين في نفس المجلد مع QQprotect.exe root@kitploit:...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 تنفيذ Impacket لمفهوم الإثبات PoC لـ PrintNightmare الذي أنشأه في الأصل Zhiniang Peng @edwardzpeng و Xuefeng Li @lxf02942370 تم اختباره على وحدة تحكم مجال 2019 محدثة بالكامل. تنفيذ DLLs خبيثة عن بُعد أو محليًا. تحديث التصحيح أصدرت Microsoft تصحيحًا للتخفيف من هذه...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / بحث + PoC أنشئ اختصارًا + ملف .DLL يحتوي على حمولة خبيثة = ضعه في USB وأرسله إلى الضحية = يفتح الضحية USB = تُنفَّذ الحمولة تلقائيًا! السبب الجذري 1. أولاً، علينا أن نعرف بالضبط من أين يأتي هذا الخطأ! إنه بسبب ميزة تسمى Plug-and-Play التوصيل والتشغيل حيث يكتشف نظام التشغيل الجهاز...

CVE-2021-1675

Explication de la vulnérabilité Le Spooler d'impression est un service Windows qui gère les files d'attente d'impression. Il reçoit les tâches soumises par l'utilisateur, les convertit dans un format compréhensible par l'imprimante et les envoie lorsque celle-ci est disponible. Il s'exécute en ta...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

CVE-2026-9169

CVE-2026-9169 describes a DLL search order hijacking issue in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows. An attacker with local access can place a malicious DLL in a user-controlled directory that appears in the PATH the SDK traverses to resolve a dependency, resulting in arbitrary code ex...

CVE-2026-16519

Vulnerability overview. CVE-2026-16519 affects the GeoVision GV-IP Device Utility desktop application, where it loads DLLs from an unsafe search path. This DLL search order hijacking allows a local attacker to place a malicious DLL in a location that’s searched before the legitimate library, enab...

CVE-2026-32679

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

EUVD-2026-25138

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver BYOVD technique to silence security tools running on compromised hosts, according to findings from Cisco Talos and Trend Micro. Qilin attacks analyzed by Talos have...

CVE-2025-59710

An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the...

CVE-2025-59710

CVE-2025-59710 affects BizTalk360 prior to v11.5. The root cause is improper access control that allows any user to request loading a DLL; during loading, a method is invoked and a malicious DLL uploaded by an attacker can lead to remote code execution on the server. The vulnerability is referenc...

PT-2026-25768

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...

CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

CVE-2026-24317

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

EUVD-2026-8835

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privileg...