CVE-2021-1240 Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability

A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to...

CVE-2021-1240

Cisco Proximity Desktop for Windows DLL Hijacking vulnerability (CVE-2021-1240) allows a local, authenticated attacker to load a malicious DLL by placing it in a specific location; execution occurs when the vulnerable app launches. Root cause: improper handling of directory paths at run time. Imp...

Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability

A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to...

PT-2021-1634

Name of the Vulnerable Software and Affected Versions: Cisco Proximity Desktop affected versions not specified Description: The issue is related to an uncontrolled search path element in the loading process of specific DLLs. This could allow an authenticated, local attacker to load a malicious...

Internet Bug Bounty: Canonical Snapcraft vulnerable to remote code execution under certain conditions

Preface: I apologize for previously submitting this bug to hacker1 before it was fully addressed by the Ubuntu Security Team I have reported this issue to the Ubuntu Security team and it has been fixed: CVE-2020-27348 Bug link: https://bugs.launchpad.net/snapcraft/+bug/1901572 Ubuntu Security Tea...

The vulnerability of the DLL library loading mechanism of the Cisco Webex Teams software for Windows allows a malicious actor to load a malicious library into the system.

The vulnerability of the DLL library loading mechanism for Cisco Webex Teams software for Windows is related to errors in processing path handling for directories. Exploiting this vulnerability can allow an attacker to load the malicious library into memory...

Cool Music (Windows client) suffers from a dll hijacking vulnerability (CNVD-2020-72476)

Cool Music is a music player that serves songs to its users. A dll hijacking vulnerability exists in CoolMusic Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Nail (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-72473)

Nail is an intelligent mobile office platform. A dll hijacking vulnerability exists in Nail Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Ape Tutoring (Windows client) suffers from a dll hijacking vulnerability

Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. Ape Tutoring Windows client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4661-1 advisory. It was discovered that Snapcraft includes the current directory when configuring LDLIBRARYPATH for application commands. If a user were tricked into...

USN-4661-1 snapcraft vulnerability

It was discovered that Snapcraft includes the current directory when configuring LDLIBRARYPATH for application commands. If a user were tricked into installing a malicious snap or downloading a malicious library, under certain circumstances an attacker could exploit this to affect strict mode sna...

Adobe After Effects has a dll hijacking vulnerability (CNVD-2020-69406)

Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software. A dll hijacking vulnerability exists in Adobe After Effects. An attacker can exploit this vulnerability to load a maliciou...

CVE-2020-27695

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrative privileges during the installation of the product...

Cyclone PDF is vulnerable to DLL hijacking

Cyclone PDF is a PDF reading tool. Cyclone PDF has a DLL hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

PT-2020-17820

Name of the Vulnerable Software and Affected Versions InstallBuilder for Qt Windows versions prior to 20.7.0 Description The issue allows an attacker to potentially execute code with the security scope of the installer by planting a malicious library in a predictable location where the installer...

DLL Hijacking Vulnerability in WPS Office Campus Edition (CNVD-2020-51405)

WPS Office Campus is a lifetime free office software for teachers and students. WPS Office Campus Edition suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious DLL...