DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in MiChat PC Client Software

MiChat is multi-platform instant messaging software. It supports voice, picture, video, text, red envelope, broadcast, video phone, remote assistance, screen sharing. MiChat pc client software has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL fil...

DLL Hijacking Vulnerability in Karaoke Companion PC Client Software

Karaoke Companion is a karaoke software specially designed and produced for friends who love to sing, Karaoke Companion can help you create a variety of sound effects, including electric sound, vibrato, echo and so on. Karaoke Partner pc client software has a DLL hijacking vulnerability that can ...

Ali Want Want pc client software suffers from DLL hijacking vulnerability

Ali Want Want is a new business communication software, Ali Want Want buyer version of Taobao shopping with the communication needs of the combination of a lot of online shopping features, to create China's largest e-commerce first IM. Ali Want Want pc client software there is a DLL hijacking...

DLL Hijacking Vulnerability in EaseUS pc Client Software

YiXin is an instant messaging software jointly developed by NetEase and China Telecom. The PC version of YiXin focuses on free chatting features, as well as high-definition chatting voice, posting emoticons and so on. There is a DLL hijacking vulnerability in EaseUS pc client software, which can ...

DLL Hijacking Vulnerability in Ali Qianniu's pc Client Software

Qianniu Workbench is a seller belonging to Alibaba is a free online business communication software customized for merchants. Aliqianniu pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process an...

NYPD Fingerprint Database Taken Offline to Thwart Ransomware

The New York Police Department’s database of fingerprints was knocked offline over the weekend thanks to a ransomware scare, according to reports. The malware was introduced to the network via a contractor who was installing a digital display, according to an article in the New York Post. To do t...

CVE-2019-16675

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+...

Out-of-bounds

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+...

CVE-2019-16675

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+...

CVE-2019-16675

CVE-2019-16675 affects Phoenix Contact Automation Worx Software Suite (PC Worx, PC Worx Express, Config+) up to version 1.86. The issue is an out-of-bounds read / memory handling vulnerability in parsing project/MBT files (MWT/BCP), caused by insufficient input validation, which can allow remote ...

CVE-2019-16675: Out-of-bounds Read

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+...

PT-2019-14760

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT PC Worx versions 1.86 and earlier PHOENIX CONTACT PC Worx Express versions 1.86 and earlier PHOENIX CONTACT Config+ versions 1.86 and earlier Description An issue was discovered that could lead to an Out-of-bounds Read and remo...

Microsoft's Secured-Core PC Feature Protects Critical Code

The “secured-core PC” feature for Windows looks to head off firmware hacks...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

Phoenix Contact Automation Worx CVE-2019-16675 Remote Code Execution Vulnerability

Description Phoenix Contact Automation Worx is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition. The...

ASX To MP3 Converter 3.1.3.7 Stack Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow DEP", 'Description' = %q This module exploits a stack buffer overfl...

CVE-2019-16913

PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...

CVE-2019-16913

PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...

Default credentials

PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...