Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/12/19 8:18 p.m.2 views

CVE-2023-53937

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

8.5CVSS6.8AI score0.00018EPSS
Exploits1References1
OSV
OSV
added 2025/12/18 8:15 p.m.1 views

CVE-2023-53937

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

8.5CVSS5.8AI score0.00018EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52316

Name of the Vulnerable Software and Affected Versions Hubstaff version 1.6.14 Description The software contains a DLL search order hijacking issue. An attacker can replace a missing system32wow64log.dll with a malicious library. By using tools like Metasploit to create a custom DLL and placing it...

8.5CVSS6.7AI score0.00018EPSS
Exploits1References5
NVD
NVD
added 2024/10/22 4:15 p.m.7 views

CVE-2024-48605

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file...

7.8CVSS0.05839EPSS
Exploits1References4
CVE
CVE
added 2024/10/22 12:0 a.m.44 views

CVE-2024-48605

CVE-2024-48605 describes a vulnerability in the Helakuru Desktop Application v1.1 where a local attacker can execute arbitrary code due to improper validation of the wow64log.dll . The issue is rooted in DLL hijacking/validation weakness allowing local privilege escalation. The NVD entry assigns ...

7.8CVSS7.6AI score0.05839EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/10/22 12:0 a.m.17 views

CVE-2024-48605

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file...

0.05839EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/10/22 12:0 a.m.12 views

CVE-2024-48605

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file...

7.8AI score0.05839EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/10/22 12:0 a.m.1 views

Helakuru 代码问题漏洞

Helakuru is an Android keyboard from Helakuru Sri Lanka. A security vulnerability exists in Helakuru v1.1, which stems from a failure to properly validate the wow64log.dll file, allowing a local attacker to execute arbitrary code...

7.8CVSS7.1AI score0.05839EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2022/05/04 12:0 a.m.220 views

Conti.Ransom Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/710a77804637f65e22a2e230ff6444f9.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Conti.Ransom Vulnerability: Code Execution Description: Conti looks for and loads a DLL named...

7.4AI score
Exploits0
Rows per page
Query Builder