VMWare Player 12.5.9 Privilege Escalation / Denial Of Service

Hi @ll, the executable installer of VMware Player 12.5.9, published in January 2018, available from , is vulnerable. JFTR: VMware Player 12.5.9 is the last version which runs on 32-bit Windows, and the last to support older CPUs. Although running with administrative privileges its embedded...

ESET NOD32 Antivirus DLL Hijacking

Hi @ll, the executable installer ° of ESET's NOD32 antivirus, esetnod32antivirusliveinstaller.exe, loads and executes at least the rogue/bogus/malicious Cabinet.dll and DbgHelp.dll eventually found in the directory it is started from ' the "application directory". For software downloaded with a w...

7-Zip DLL Hijack

Hi @ll, the executable installers ° of 7-Zip see and ALL self-extracting archives created with 7-Zip are vulnerable: 1. They load and execute a rogue/bogus/malicious UXTheme.dll ' eventually found in the directory they are started from the "application directory". For software downloaded with a w...

VLC DLL Hijack

Hi @ll, the executable installers ° of the videolan client VLC, see are vulnerable: 1. They load and execute a rogue/bogus/malicious ShFolder.dll '² and other DLLs like SetupAPI.dll or UXTheme.dll too eventually found in the directory they are started from the "application directory". For softwar...

ZH2005-13SA.txt

ZH2005-13SA security advisory: NEXTWEB iSite™ multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite™ Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...

[ZH2005-13SA] NEXTWEB (i)Site website management multiple vulnerabilities

ZH2005-13SA security advisory: NEXTWEB iSite™ multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite™ Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...

Shorewall symbolic links problem

Temporary files and directories are created in unsafe manner...