DLLHSC

DLLHSC DLL Hijack SCanner - DLL 검색 순서 하이재킹 후보를 자동으로 발견하고 리드를 생성하는 도구 이 페이지의 목차 이 저장소의 내용 작동 모드 컴파일 및 실행 가이드 도움말 메뉴 실행 예시 피드백 이 저장소의 내용 이 저장소에는 도구DLLHSC의 Visual Studio 프로젝트 파일, API 후킹 기능detour의 프로젝트 파일, 페이로드의 프로젝트 파일, 그리고 x86 및 x64 아키텍처용으로 컴파일된 실행 파일이 저장소의 릴리스 섹션에 있음이 포함되어 있습니다. 코드는 Visual Studio...

CVE-2024-0197-POC

CVE-2024-0197-POC Thales Sentinel HASP LDK의 로컬 권한 상승에 대한 개념 증명. 처음에는 하나를 개발하려고 했지만, 결국 불필요한 것으로 판명되었습니다. 극복해야 할 경쟁 조건race condition은 없으며, 알려진 위치에서 간단한 DLL 검색 순서 하이재킹만으로 SYSTEM 권한을 획득할 수 있습니다. 간단히: 1. raw.cpp를 fltlib.dll로 컴파일하여 AppData\Local\Temp에 넣습니다 C:\Windows\System32\fltlib.dll로 이어지는 적절한 프록시...

iscsicpl_bypassUAC

iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day iscsicpl.exe バイナリには、SysWOW64 を介して 64bit ホスト上で 32bit の Microsoft バイナリを実行する際に、DLL 検索順序ハイジャックの脆弱性があります。32bit バイナリは、ユーザーの %Path% 内で iscsiexe.dll という DLL を検索します。これは、autoelevate が有効になっているため、Proxy DLL...

DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 Slack 4.33.73의 DLL Planting - CVE-2023-38820 발견자: Idan Malihi 설명 Slack Slack v.4.33.73의 문제로 인해 로컬 공격자가 profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll, MSASN1.dll, mf.dll, mfplat.dll 및 RTWorkQ.DLL 파일의 DLL 로딩 메커니즘을 통해 임의 코드를 실행할 수 있습니다. 재현 단계 취약점을 악용하려면...

CVE-2025-33053_PoC

CVE-2025-33053 POCエクスプロイト 概要 .urlファイルの作業ディレクトリは、外部のWebDAVサーバーに設定することができます。Windowsクライアントが開くと、URLフィールドで定義された実行可能ファイルの依存関係が、外部のWebDAV共有上で検索されます。任意の実行可能ファイルやDLLにこれらの依存関係のいずれかと同じ名前を付けると、Windowsクライアントによってロードされ実行されます。このPOCでは、URLはWindowsクライアントにローカルなInternet...

CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...

CVE-2026-9634

CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...

CVE-2026-9633

CVE-2026-9633 affects Rockwell Automation's Redundancy Module Configuration Tool . The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, but due to incorrect default permissions , one or more of these directories may be writable by standard (non-administrator) u...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

CVE-2026-8164

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...

CVE-2026-8164

CVE-2026-8164: Uncontrolled Search Path Element affecting ArkSigner Desktop Client (ArkSigner Software and Hardware Industry and Trade Inc.). Affected versions: v2.2.16.10 through 17062026. Impact: high for confidentiality, integrity, and availability. Attack vector: LOCAL; prerequisites: LOW pri...

CVE-2026-8164

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...

CVE-2026-8164 Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...

CVE-2026-16519

Vulnerability overview. CVE-2026-16519 affects the GeoVision GV-IP Device Utility desktop application, where it loads DLLs from an unsafe search path. This DLL search order hijacking allows a local attacker to place a malicious DLL in a location that’s searched before the legitimate library, enab...

CVE-2026-16519 GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...

CVE-2026-9128

CVE-2026-9128 describes a code execution issue in Studio 5000 Logix Designer due to an unquoted search path in the External Tools configuration. The executable paths in the external tools config file are not properly quoted, so spaces can cause the OS to resolve to unintended executables earlier ...

CVE-2026-38972

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...

CVE-2026-38972

Notepad3 versions up to 6.25.822.1 are vulnerable to a DLL search-order hijack in the About-dialog code path (src/Notepad3.c). The application loads MSFTEDIT.DLL via LoadLibrary with a bare DLL name, enabling a local attacker to place a malicious MSFTEDIT.DLL in the application directory or anoth...

CVE-2026-6645

An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system...

SUSE CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...