Approved changes feed: RSS · Atom

cpe:2.3:a:hubstaff:hubstaff:1.6.13:*:*:*:*:*:*:*

part: a version: 1.6.13 update: *

VendorHubstaff (1e4c1d94-2170-5efd-9658-3d74cec324df)
ProductHubstaff (c69526aa-b3d5-5b5c-9655-34722db7baab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-53937 vulnerable 2026-06-08 06:19:40.064848 Hubstaff 1.6.13 and 1.6.14 DLL Search Order Hijacking via wow64log Library
HIGH (7.8)
Hubstaff 1.6.13 and 1.6.14 contain a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application startup.
Published: 2025-12-18T19:57:43.518Z
Updated: 2026-10-29T21:15:03.039Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.