This Metasploit module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary (.exe) application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. When we run slui.exe with changed Registry key (HKCU:SoftwareClassesexefileshellopencommand), it will run our custom command as Admin instead of slui.exe. The module modifies the registry in order for this exploit to work. The modification is reverted once the exploitation attempt has finished. The module does not require the architecture of the payload to match the OS. If specifying EXE::Custom your DLL should call ExitProcess() after starting the payload in a different process.

Microsoft Windows Vista/7 suffers from a DLL hijacking vulnerability in lpksetup.exe.

A DLL side loading vulnerability was found in the NPS Datastore server DLL that ships with Windows Vista. This issue can be exploited by loading the affected DLL as an embedded OLE object. When instantiating the object Windows will try to load the DLL iasdatastore2.dll from the current working directory. If an attacker convinces the user to open a specially crafted (Office) document from a directory also containing the attacker's DLL file, it is possible to execute arbitrary code with the privileges of the target user. This can potentially result in the attacker taking complete control of the affected system.

A DLL side loading vulnerability was found in the BDA MPEG2 Transport Information Filter that ships with Windows Vista. This issue can be exploited by loading the filter as an embedded OLE object. When instantiating the object Windows will try to load the DLL ehTrace.dll from the current working directory. If an attacker convinces the user to open a specially crafted (Office) document from a directory also containing the attacker's DLL file, it is possible to execute arbitrary code with the privileges of the target user. This can potentially result in the attacker taking complete control of the affected system.

A DLL side loading vulnerability was found in the .NET Framework version 4.6 when running on Windows Vista or Windows 7. This issue can be exploited by luring a victim into opening an Office document from the attacker's share. An attacker can use this issue to execute arbitrary code with the privileges of the target user. This can potentially result in the attacker taking complete control of the affected system. If the WebDAV Mini-Redirector is enabled, it is possible to exploit this issue over the internet. This issue can be exploited even if the Office document is opened in Protected View.

devolo dLAN 550 duo+ version 3.1.0-1 suffers from a remote code execution vulnerability. The devolo firmware has what seems to be a 'hidden' services which can be enabled by authenticated attacker via the the htmlmgr CGI script. This allows the attacker to start services that are deprecated or discontinued and achieve remote arbitrary code execution with root privileges.

Poor infrastructure and political instability deter tourism, but small and manageable steps to avoid chaos and promote hospitality can work wonders.

The UN Sustainable Development Goals aim to end global poverty, but poorer countries are struggling to hit them. More help from richer countries is crucial, writes Mazdak Rafaty.

FDI levels have already fallen throughout Iran's main sphere of influence in the region. 

The UAE followed Singapore’s swift reaction to combat Covid-19, to preserve the health of its citizens. Now moves are in place to tackle the country’s economic wellbeing.

Consulting firms in the Middle East are likely to take a hit in 2020 due to the coronavirus, after two strong years.

The pandemic is likely to hit the Middle East’s more fragile countries hardest.

Investment into the Middle East region by US-based companies showed a notable increase between the beginning fo 2016 and the end of 2018. 

Dubai outstrips other Middle East cities as top destination for office openings.

The UAE remained the Middle East's most popular destination for foreign manufacturing investments in 2018.

ComEd sees a significant role for energy storage on Illinois’ electric grid as the state works toward realizing its ambitious renewable goals.

BMW has been spotted testing what appears to be a new performance flagship for the M5 range. Word on the street is that the car, which will likely be dubbed an M5 CS, is powered by a newly developed V-8. Porsche looks to be readying a Cayenne GTS Coupe to help bridge the performance gap between the S and Turbo. The new variant should debut next...

Political deadlock over Australia’s clean energy future is prompting companies such as Vestas Wind Systems A/S and Acciona SA to increasingly turn to rival markets for growth.

Electricite du Laos and General Electric have signed a memorandum of understanding to launch joint research and training programs designed to support the development of Laos' hydroelectric power sector and electric grid.

The North Carolina Attorney General's Office has filed a court injunction against the German ownership group that owns the damaged Woodlake Dam in an effort to make it pay for dam safety repairs.

ComEd sees a significant role for energy storage on Illinois’ electric grid as the state works toward realizing its ambitious renewable goals.

This week energy storage maker ESS Inc said that it had deployed an Energy Warehouse (EW) long-duration flow battery system at Marine Corps Base Camp Pendleton in San Diego, California.

Facebook Inc. is boosting its clean-energy efforts with a deal to help run a Virginia data center where it leases space with solar power.

ComEd sees a significant role for energy storage on Illinois’ electric grid as the state works toward realizing its ambitious renewable goals.

Americans have been receiving contradictory information about the coronavirus pandemic, so much so that it's become a joke. One example is face masks: In March, the World Health Organization advised people to not wear masks if they aren't sick or caretakers of the sick. 

But given that some coronavirus patients are asymptomatic, opinions of masks from top officials have shifted. The CDC and the media now advise you to wear a damn mask. And a new study may provide more evidence that masks can help beat the outbreak.

According to this study, if 80 percent of Americans wore masks, coronavirus infections would plummet, Vanity Fair reports. The title of the study makes the researchers' view clear: Universal Masking is Urgent in the COVID-19 Pandemic. Read more...

Guidance on establishing processes to rapidly detect and respond to cyber incidents.

The number of coronavirus deaths in the UK reached 29,427 Tuesday, surpassing Italy (29,029), to become Europe's worst-struck country and the second-worst globally after the US, while prompting calls for a public enquiry into government handling of the crisis. "I really don't like this league table of who's top and who's not, but there's no denying that these are really serious numbers," Cambridge University expert David Spiegelhalter told The Guardian.

Political deadlock over Australia’s clean energy future is prompting companies such as Vestas Wind Systems A/S and Acciona SA to increasingly turn to rival markets for growth.

New Crane Wharf Freehold Ltd v Jonathan Mark Dovener [2019] UKUT 98 (LC) A lease covenant requiring the tenant defendant, Mr Dovener, to “permit” its landlord “…at al...

Windsor-Clive v Rees [2019] EWHC 1008 (Ch) In considering the scope of a landlord’s reserved right to enter premises let to their tenant “for all reasonable purposes”, the High Court has held that the right to do so must be...

Westmark (Lettings) Limited v Elizabeth Peddle and others [2017] UKUT 449 (LC) Here, the Upper Tribunal had to decide on the issue of when “relevant costs” are incurred for the purposes of Section 20(B)(1) of the Landlord and Tenant Act ...

Fouladi v Darout Ltd and others [2018] EWHC 3501 (Ch) A nuisance is caused by a person doing something on his own land, which he is lawfully entitled to do but which becomes a nuisance when the consequences of his act extend to the land of his neigh...

On 20th March, we held the 'Coronavirus Insights and practical solutions for landlords' webinar.  In this webinar, our speakers discussed how the outbreak of Covid-19 and the subsequent political and economic impact is having a signific...

  For landlords involved in construction works, COVID-19 is creating a fast-changing and uncertain landscape. Whilst many things are beyond a landlord's control, there are some important practical steps that can be taken to maximise control ov...

In our briefing of 23 May 2012, we reported the publication of the Enterprise and Regulatory Reform Bill, legislation which proposes various measures to improve resolution of employment disputes and tribunal refo...

Witold Slawinski, head of tech & industrial engineering practice, authored an article for AmCham Quarterly. It is devoted to the recent changes to the Polish public procurement law. Read the full article >...

In this session we look at high value/reputationally sensitive disputes in the education sector. Running a university or Higher Education Institution is always a complicated business – and never more so than now. The sector is facing a time of unp...

The change Important new guidance for giving disclosure of electronic documents in civil litigation was introduced on 1 October 2010. A new practice direction (31B: the Electronic Disclosure PD)  will have a significant impact on substantial c...