CVE-2024-55347

Divulgação de CVE: CVE-2024-55347 Divulgação Pública de CVE-2024-55347 🚀 Data: 10-02-2025 Resumo Uma vulnerabilidade de Binary Planting no Kroll Artifact Parser And Extractor KAPE v1.3.0.2 permite que invasores elevem privilégios e executem código arbitrário ao colocar um arquivo binário...

CVE-2020-0668

CVE-2020-0668 PowerShell-Implementierung, die printconfig.dll zur Privilegienausweitung verwendet Die bösartige DLL kann selbst definiert werden. Meine DLL führt die Datei c:\programdata\setup.bat aus. Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

CVE-2023-34312-exp

Haftungsausschluss Dieses Projekt wurde ausschließlich für Reproduktionsexperimente erstellt Betroffene Versionen QQ 9.6.2.27855 9.7.11.29088 außer QQ 9.7.10, da diese scheinbar kein QQProtect.exe enthält TIM 3.4.5.22071 3.4.7.22084 Verwendung Nach der Installation von QQ/TIM müssen sich die beid...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Impacket-Implementierung des PrintNightmare PoC, ursprünglich erstellt von Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Getestet auf einem vollständig gepatchten 2019 Domain Controller Remote oder lokal bösartige DLLs ausführen Patch-Update Microsoft hat ein...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / pesquisa + PoC Crie 1 Atalho + 1 .DLL contendo payload malicioso = Coloque no USB e envie para a vítima = vítima abre o USB = Payload é ativado automaticamente! CAUSA RAIZ 1. Primeiro, precisamos saber exatamente de onde vem essa falha! Isso se deve ao recurso chamado Plug-and-Pla...

CVE-2021-1675

Erklärung der Schwachstelle Der Druckspooler ist ein Windows-Dienst, der Druckwarteschlangen verwaltet. Er empfängt Aufträge, die vom Benutzer übermittelt werden, konvertiert sie in ein Format, das der Drucker versteht, und sendet sie, sobald der Drucker verfügbar ist. Er läuft als Systemdienst...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

CVE-2026-9169

CVE-2026-9169 describes a DLL search order hijacking issue in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows. An attacker with local access can place a malicious DLL in a user-controlled directory that appears in the PATH the SDK traverses to resolve a dependency, resulting in arbitrary code ex...

CVE-2026-16519

Vulnerability overview. CVE-2026-16519 affects the GeoVision GV-IP Device Utility desktop application, where it loads DLLs from an unsafe search path. This DLL search order hijacking allows a local attacker to place a malicious DLL in a location that’s searched before the legitimate library, enab...

CVE-2026-32679

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

EUVD-2026-25138

The installers of LiveOn Meet Client for Windows Downloader5Installer.exe and Downloader5InstallerForAdmin.exe and the installers of Canon Network Camera Plugin CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe insecurely load Dynamic Link Libraries DLLs. If a malicious DLL is placed at the...

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver BYOVD technique to silence security tools running on compromised hosts, according to findings from Cisco Talos and Trend Micro. Qilin attacks analyzed by Talos have...

CVE-2025-59710

An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the...

CVE-2025-59710

CVE-2025-59710 affects BizTalk360 prior to v11.5. The root cause is improper access control that allows any user to request loading a DLL; during loading, a method is invoked and a malicious DLL uploaded by an attacker can lead to remote code execution on the server. The vulnerability is referenc...

PT-2026-25768

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...

CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

CVE-2026-24317

SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's...

EUVD-2026-8835

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privileg...