CVE-2015-3409

Module::Signature prior to 0.75 is vulnerable to an untrusted search path, enabling local privilege escalation by placing a Trojan horse module in the current working directory. The issue stems from loading modules from relative paths in @INC during signature verification, leading to arbitrary co...

Code injection

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

CVE-2015-1484

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

Design/Logic Flaw

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-2789

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

CVE-2015-2789

Summary : CVE-2015-2789 is an unquoted Windows search path vulnerability in Foxit Reader’s Cloud plugin (Foxit Cloud Safe Update Service) affecting Foxit Reader 6.1–7.0.6.1126. This local privilege-escalation flaw can allow a non-privileged, local attacker to gain elevated privileges via a Trojan...

Telerik Analytics Monitor Library Search Path Vulnerability

Telerik Analytics Monitor Library is a library for third-party application analytics services to collect information about applications. A search path vulnerability in Telerik Analytics Monitor Library allows local attackers to exploit the vulnerability to execute in the context of an application...

Various Siemens products have search path vulnerabilities

Siemens SIMATIC ProSave; SIMATIC CFC 8 SP4 upd9 8.1 upd1; SIMATIC STEP 7 5.5 SP1 Hf2 5.5 SP2 5.5 SP4 HF4 HF7 sp35.5; SIMOTION Scout 4.4 Starter 4.4 HF3 are all Siemens Siemens Germany company in Germany. A search path vulnerability exists in several Siemens products, allowing local users to gain...

CVE-2015-0884

CVE-2015-0884 describes an unquoted Windows search path privilege-escalation vulnerability in Toshiba Bluetooth Stack for Windows (before 9.10.32(T)) and Toshiba Service Station (before 2.2.14). A local attacker can exploit the issue by delivering a Trojan horse application whose name is an initi...

KLA10464 Multiple vulnerabilities in Mozilla products

Multiple serious vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privilleges, obtain sensitiv information, execute arbitrary code, spoof user interface or read local files. Below is a complete list of...

CVE-2014-9646

Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/googlechromedistribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the...

CVE-2014-8397

Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed...

CVE-2015-1041

Cross-site scripting XSS vulnerability in e107admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107files/ file path in the QUERYSTRING...

CVE-2014-8395

CVE-2014-8395 is a Corel DLL Hijacking vulnerability affecting Corel Painter 2015 (and related Corel products listed in the CORE-2015-0001 advisory). The issue arises from untrusted search path handling: when a user opens a file associated with Corel apps, the application searches the document’s ...

CVE-2014-4634

CVE-2014-4634 describes an unquoted Windows search path vulnerability in EMC Replication Manager (pre-5.5.2) and EMC AppSync (pre-2.1.0). The underlying issue is an unquoted service path used by Windows services, enabling a local attacker to abuse a Trojan horse executable whose name starts with ...

[ MDVSA-2014:162 ] catfish

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:162 http://www.mandriva.com/en/support/security/ Package : catfish Date : September 2, 2014 Affected: Business Server 1.0 Problem Description: Updated catfish package fixes security vulnerability: Untrusted...

CVE-2014-3391

Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.43, 8.5, and 8.7 before 8.71.13 allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LDLIBRARYPATH value, aka Bug I...

CVE-2013-1874

CVE-2013-1874 describes an untrusted search path vulnerability in Chicken's csi, where local users can execute arbitrary code via a Trojan horse .csirc in the current working directory. Affected: Chicken prior to 4.8.2; fix is to upgrade to 4.8.2 or later. The CVSS data indicates local access wit...

WordPress FR0_theme theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress FR0theme theme Arbitrary File Download Vulnerability Author : alieye designer Homepage : http://english.gg.go.kr/ Contact : email protected Risk : High Class: Remote...

CVE-2014-5455

CVE-2014-5455 describes a local privilege-escalation via an unquoted service path in the ptservice service for PrivateTunnel (Windows) prior to v3.0 and OpenVPN Connect (Windows) before v3.1. A crafted program.exe placed in the %SYSTEMDRIVE% folder could be executed with elevated privileges by th...