https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:04:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05846 bdu:2023-05846 https://cve.radiocsirt.org/vuln/bdu:2023-05846 https://cve.radiocsirt.org/vuln/euvd-2026-244781 EUVD-2026-244781 https://cve.radiocsirt.org/vuln/euvd-2026-244781 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29445 <p>An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.</p> <p>An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29445 https://cve.radiocsirt.org/vuln/ghsa-3hx8-rcv2-389f <p>An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.</p> <p>An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.</p> https://cve.radiocsirt.org/vuln/ghsa-3hx8-rcv2-389f https://cve.radiocsirt.org/vuln/gsd-2023-29445 gsd-2023-29445 https://cve.radiocsirt.org/vuln/gsd-2023-29445 https://cve.radiocsirt.org/vuln/icsa-23-243-03 <p>The installer application of KEPServerEX is vulnerable to DLL search order hijacking. This could allow an adversary to repackage the installer with a malicious DLL and trick users into installing the trojanized software. Successful exploitation could lead to code execution with administrator privileges. KEPServerEX binary is vulnerable to DLL search order hijacking. A locally authenticated adversary could escalate privileges to administrator by planting a malicious DLL in a specific directory. KEPServerEx is vulnerable to UNC path injection via a malicious project file. By tricking a user into loading a project file and clicking a specific button in the GUI, an adversary could obtain Windows user NTLMv2 hashes, and crack them offline. The KEPServerEX Configuration web server uses basic authentication to protect user credentials. An adversary could perform a man-in-the-middle (MitM) attack via ARP spoofing to obtain the web server&#39;s plaintext credentials.</p> <p>The installer application of KEPServerEX is vulnerable to DLL search order hijacking. This could allow an adversary to repackage the installer with a malicious DLL and trick users into installing the trojanized software. Successful exploitation could lead to code execution with administrator privileges. KEPServerEX binary is vulnerable to DLL search order hijacking. A locally authenticated adversary could escalate privileges to administrator by planting a malicious DLL in a specific directory. KEPServerEx is vulnerable to UNC path injection via a malicious project file. By tricking a user into loading a project file and clicking a specific button in the GUI, an adversary could obtain Windows user NTLMv2 hashes, and crack them offline. The KEPServerEX Configuration web server uses basic authentication to protect user credentials. An adversary could perform a man-in-the-middle (MitM) attack via ARP spoofing to obtain the web server&#39;s plaintext credentials.</p> https://cve.radiocsirt.org/vuln/icsa-23-243-03