4030 matches found
CVE-2024-50986
CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...
DLL_Injection_On_VLC
Inyección de DLL y CVE-2010-3124 Descripción general 🌱 Este proyecto explora el tema de la inyección de DLL Dynamic Link Library y se centra específicamente en el CVE-2010-3124. CVE-2010-3124 se refiere a una vulnerabilidad de ruta de búsqueda no confiable encontrada en VLC Media Player versión...
CVE-2010-5230
CVE-2010-5230 Múltiples vulnerabilidades de ruta de búsqueda no confiable en MicroStation 7.1 permiten a usuarios locales obtener privilegios a través de un archivo Troyano 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll o 4 wintab.dll en el directorio de trabajo actual, como se demuestra con un...
CVE-2024-6473-PoC
CVE-2024-6473 PoC Yandex Browser para escritorio anterior a 24.7.1.380 tiene una vulnerabilidad de DLL Hijacking porque se utiliza una ruta de búsqueda no confiable. Versión vulnerable del navegador !IMPORTANT Se debe apagar Internet durante la instalación, de lo contrario el navegador se...
CVE-2024-32019-ndsudo
La vulnerabilidad ndsudo permite a un atacante obtener permisos de root explotando una ruta de búsqueda no confiable en la herramienta ndsudo, que forma parte del Netdata Agent. Esto puede permitir la ejecución de programas arbitrarios con privilegios elevados si el atacante coloca un binario...
CVE-2026-81192
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-80159
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
EUVD-2026-74105
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-80159
Acrobat Reader is affected by an Untrusted Search Path vulnerability (CWE-426 ) that could lead to privilege escalation . An attacker with high privileges could exploit this to gain elevated access, though exploitation requires user interaction (opening a malicious file) and depends on conditions...
CVE-2026-80159 Acrobat Reader | Untrusted Search Path (CWE-426)
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-81192
CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...
CVE-2026-69785
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-73615
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69785
CVE-2026-69785 is an untrusted search path vulnerability in Windows Smart Card that allows an authorized attacker to elevate privileges locally. The flaw resides in how Windows Smart Card resolves file paths, permitting a local attacker with low privileges (no user interaction required) to achiev...
EUVD-2026-73458
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...
