CVE-2016-7818

CVE-2016-7818 is an Untrusted search path vulnerability in Japan Pension Service installers: Specification check program (social insurance) v9.00 and earlier, TODOKESHO print program v5.00 and earlier, Device data encryption program v1.00 and earlier, and TODOKESHO creation program v15.00 and ear...

CVE-2017-2177

CVE-2017-2177 affects the installer for Shogyo Touki Denshi Ninsho Software, versions 1.7 and earlier. The vulnerability is an untrusted search path that allows an attacker to gain privileges by placing a Trojan horse DLL in an unspecified directory. Connected sources (JVN/JVNDB, CNVD, CVE record...

CVE-2017-2209

The CVE-2017-2209 entry concerns the installer of Houkokusyo Sakusei Shien Tool. Multiple sources describe an untrusted DLL search path that may allow an attacker to load a Trojan horse DLL, enabling arbitrary code execution with the privileges of the installer. Affected are installer components ...

CVE-2017-2212

CVE-2017-2212 affects TKY2JGD1379.EXE (TKY2JGD version 1.3.79). The untrusted search path vulnerability (CWE-427) in the installer may allow an attacker to gain privileges by placing a malicious DLL in a directory searched by the installer, enabling arbitrary code execution with the caller’s priv...

CVE-2017-2213

The CVE-2017-2213 entry concerns SemiDynaEXE2008.EXE (version 1.0.2). The vulnerability is an untrusted search path that allows privilege escalation via a Trojan horse DLL located in an unspecified directory. Affected component is the installer/executable SemiDynaEXE2008.EXE; root cause is insecu...

RW-5100 tool to verify execution environment may insecurely load Dynamic Link Libraries

Overview RW-5100 tool to verify execution environment for IC Card Reader/Writer devices provided by Sharp Corporation contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation and BlackWingCat of...

CVE-2017-2107

CVE-2017-2107 concerns Self-extracting archives created by the 7-ZIP32.DLL library (versions 9.22.00.01 and earlier). The root cause is an insecure DLL search path (CWE-427) in the self-extracting archive loading process, allowing an attacker to execute arbitrary code with user privileges if a Tr...

CVE-2016-4846

Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2...

HelpDEZk Cross-Site Request Forgery Vulnerability

HelpDEZk is a suite of PHP-based software for managing requests, events. A cross-site request forgery vulnerability exists in admin/home/person/ in HelpDEZk. It allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to perform malicious actions an...

Honeywell XL Web II Controller Clear Text Stored Password Vulnerability

Honeywell XL Web Controller is a web-based SCADA system. A plaintext stored password vulnerability exists in the Honeywell XL Web II Controller, which could allow an attacker to obtain a user's password by accessing a specific URL...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-1281

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application...

CVE-2016-10009

OpenSSH/OpenSSH-ssh-agent PKCS#11 path trust issue (CVE-2016-10009) is still referenced in connected documents as an incomplete fix leading to remote code execution when an agent is forwarded to an attacker-controlled system. Astra Linux notes: The vulnerability is due to an insufficiently trustw...

CVE-2016-7085

CVE-2016-7085 describes an untrusted search path vulnerability in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, enabling local privilege escalation via a Trojan horse DLL placed in an unspecified directory. The initial description states th...

Huawei Flybox B660 Router Bypass Authentication Vulnerability

Huawei is a Chinese supplier engaged in information and communication solutions.Huawei Flybox B660 Router is a router device from Huawei. An authentication bypass vulnerability exists in the Huawei Flybox B660 Router. The vulnerability exists due to a local path ". /htmlcode/html/" module and the...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2016-10246)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.0.5, which stems from the failure of...

Realtek High Definition Audio Driver 6.0.1.6730 - Unquoted Service Path Privilege Escalation

Realtek High Definition Audio Driver 6.0.1.6730 - Unquoted Service Path Privilege Escalation Exploit Title: Realtek High Definition Audio Driver - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 6.0.1.6730 Tested on: Windows 7 Professional The Realte...

CVE-2016-6935

Adobe Creative Cloud Desktop on Windows is affected by CVE-2016-6935 due to an unquoted Windows search path in versions prior to 3.8.0.310, enabling local privilege escalation via a Trojan horse executable placed in the SYSTEMDRIVE root. The advisory APSB16-34 recommends updating to 3.8.0.310 to ...

CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

JCraft / JSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal

Exploit for windows platform in category dos / poc Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 Version: 0.3 Date: Aug 31st, 2016 Complete Proof of Concept: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725...