EUVD-2018-13757

Malware in sbrugna...

EUVD-2010-5223

Malware in sbrugna...

EUVD-2013-1097

Malware in sbrugna...

EUVD-2018-1434

Malware in sbrugna...

EUVD-2010-5186

Malware in sbrugna...

EUVD-2010-3159

Malware in sbrugna...

EUVD-2018-3010

Malware in sbrugna...

EUVD-2024-46803

Malicious code in bioql PyPI...

EUVD-2024-0674

Malicious code in bioql PyPI...

CVE-2010-5237

Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via a Trojan horse mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file. NOTE: some of these details are obtain...

Design/Logic Flaw

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Untrusted Search Path vulnerability that could lead to Application denial-of-service. An attacker could leverage this vulnerability if the default PowerShell Set-ExecutionPolicy is set to...

CentOS 8 : nodejs:16 (CESA-2023:1582)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1582 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

CVE-2023-26358 Adobe Creative Cloud AdobeExtensionService.exe local privilege escalation vulnerability

Creative Cloud version 5.9.1 and earlier is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources...

CVE-2022-35868

Siemens TIA Project-Server and TIA Multiuser Server are affected by an untrusted search path vulnerability (CWE-426) that could allow local privilege escalation when a user starts the service from an attacker-controlled path. Affected: TIA Multiuser Server V14 (all), TIA Multiuser Server V15 befo...

CVE-2021-36631

Summary: Baidunetdisk versions 7.4.3 and earlier are affected by an untrusted search path vulnerability that enables local privilege escalation via a Trojan horse DLL in an unspecified directory. Root cause: untrusted DLL search path. Impact: local privileges elevation with high confidentiality/i...

CVE-2021-3305

Feishu (Beijing Feishu Technology Co.) v3.40.3 is affected by an untrusted search path vulnerability. The CVE-2021-3305 entry indicates a LOCAL, LOW-ATTACK-CURVE issue with HIGH impact across confidentiality, integrity, and availability, with a CVSSv3.1 base score of 7.8 and UI interaction requir...

CVE-2021-3305

Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability...

CVE-2022-36403

The CVE-2022-36403 issue affects Ricoh Device Software Manager installer up to version 2.20.3.0. The root cause is an untrusted search path that may cause insecure loading of DLLs (CWE-427), potentially allowing arbitrary code execution with the installer user’s privileges. Public documents consi...

CVE-2022-28128

CVE-2022-28128 affects AttacheCase (HiBARA) up to version 3.6.1.0. The vulnerability arises from untrusted DLL search path handling, enabling a local attacker to load a Trojan horse DLL and gain privileges or execute arbitrary code. Exploitation is described as a local issue with potential for ar...

GO-2021-0163 Privilege escalation on Windows via malicious DLL in syscall

Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory...