PT-2023-1742 · Onlyoffice · Onlyoffice Docs

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Docs versions prior to 7.3 Description: The issue is related to the use of an insecure path search in the ONLYOFFICE Docs online text document editor. Exploitation of this issue may allow an attacker to execute arbitrary code by...

Malicious code in libgetpystring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e23bb2d3e221ef88c975f5a3f435a8082f26648efb17c133ac8f4e51ce08a9a0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in liblibcvsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 495641b9d55b1258da95b7c3ee78b647b7da8db04d760cd712c8feda57b077f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libhydracvnvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a860541455a05e5d26a1dfae661f5140b4d4cf7487a0113790c463d5c79beebe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libmineurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ee5b64de705122b5e4c366fad9b7d00ad56081a9a41e34b18897bdd017782c69 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

SUSE CVE-2021-29949

When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious...

CVE-2022-43722

A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that...

PT-2022-6534 · Schneider Electric · Ecostruxure Operator Terminal Expert +1

Name of the Vulnerable Software and Affected Versions: EcoStruxure Operator Terminal Expert versions 3.3 Hotfix 1 or prior Pro-face BLUE versions 3.3 Hotfix 1 or prior Description: A vulnerability exists that allows adversaries with local user privileges to load a malicious DLL, which could lead ...

Genymotion Desktop 代码问题漏洞

Genymotion Desktop is an Android emulator from Genymotion. A security vulnerability exists in Genymotion Desktop version 3.2.1, which stems from a missing profapi.dll, and can be exploited by an attacker to use a malicious dll with the same name and gain administrator privileges, as well as execu...

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

Comodo Antivirus 后置链接漏洞

Comodo Antivirus is a gaming antivirus from Comodo, Inc. A security vulnerability exists in Comodo Antivirus version 12.2.2.8012 that originates from the ability to restore a malicious DLL from quarantine to a System32 folder using an NTFS directory link. An attacker can exploit this vulnerabilit...

Siemens SIMATIC 代码问题漏洞

SIMATIC Energy Manager visualizes process energy flows and consumption values in detail, assigns them to the relevant consumers or cost centers, and determines the reasons for changes. A security vulnerability exists in Siemens SIMATIC Energy Manager, which can be exploited by an attacker to...

AMD Radeon 代码问题漏洞

Amd Radeon is a package of device drivers and utilities for Advanced Micro Devices graphics cards and gpu's from Amd USA. A security vulnerability exists in AMD Radeon Software that stems from the possibility that AMD Radeon Software could be hijacked by a DLL via a path variable. An unprivileged...

New BLISTER Malware Using Code Signing Certificates to Evade Detection

Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the radar with the goal of deploying Cobalt Strike and BitRAT payloads on compromised systems. The binary, a loader, has...

Privilege escalation

An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an...

CVE-2021-32466: Uncontrolled Search Path Element

An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an...

PT-2021-19717

Name of the Vulnerable Software and Affected Versions: Trend Micro HouseCall for Home Networks versions 5.3.1225 and below Description: An uncontrolled search path element privilege escalation issue could allow an attacker to escalate privileges by placing a custom crafted file in a specific...

Panda Security Antivirus代码问题漏洞

Panda Security Antivirus is a suite of antivirus software from the Spanish company Panda Security. A security vulnerability exists in Panda Securit, which can be exploited by an attacker to escalate privileges via a maliciously crafted DLL file...