CVE-2023-53937

HIGH

Hubstaff 1.6.14 - DLL Search Order Hijacking

Title source: llm

Description

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application startup.

Exploits (1)

exploitdb WORKING POC

by Ahsan Azad · textlocalwindows

https://www.exploit-db.com/exploits/51461

View Code ZIP pw:eip

References (3)

[Product] https://hubstaff.com/

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/51461

[Third Party Advisory] https://www.vulncheck.com/advisories/hubstaff-dll-search-order-hijacking-via-wowlog-library

Scores

CVSS v3 7.8

EPSS 0.0002

EPSS Percentile 4.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (2)

hubstaff/hubstaff

hubstaff/hubstaff

Timeline

Published Dec 18, 2025

Tracked Since Feb 18, 2026