Exploit for Improper Certificate Validation in Microsoft

CVE-2020-0601 PoC for CVE-2020-0601 – Windows CryptoAPI Cry...

The vulnerability of the signtool, a tool for working with digital signatures, arises from buffer overflows during the processing of command-line parameters. This allows attackers to trigger a service failure.

The vulnerability of the signtool tool for handling digital signatures arises from buffer overflows during the processing of command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data ...

TinyPDF Installer DLL Hijacking / Unsafe Temp Directory

Hi @ll, the executable installer "InstallTinyPDF.exe", available from , is surprise.- vulnerable: 1. DLL hijacking this is well-known and well-documented; see , , , and "InstallTinyPDF.exe" loads and executes UXTheme.dll and/or DWMAPI.dll from its "application directory" instead Windows' "system...