CVE-2025-63685

Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validate the path or signature of [regsvr32.exe] it loads. An attacker can place a crafted malicious DLL in the application's startup directory, which will be loaded and executed when the user launches the program.

• CWE-491

• https://github.com/QIU-DIE/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory

Published

Nov 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63675cryptidy through 1.2.4 allows code execution via untrusted d…8.8
• CVE-2025-63678An authenticated arbitrary file upload vulnerability in the …7.2
• CVE-2025-63679free5gc v4.1.0 and before is vulnerable to Buffer Overflow. …7.5
• CVE-2025-6368A vulnerability was found in D-Link DIR-619L 2.06B01. It has…8.8
• CVE-2025-63680Nero BackItUp in the Nero Productline is vulnerable to a pat…8.6
• CVE-2025-63681open-webui v0.6.33 is vulnerable to Incorrect Access Control…4.3
• CVE-2025-63686There is an arbitrary file download vulnerability in GuoMinJ…6.5
• CVE-2025-63687An issue was discovered in rymcu forest thru commit f782e85 …6.5
• CVE-2025-63689Multiple SQL injection vulnerabilitites in ycf1998 money-pos…10
• CVE-2025-6369A vulnerability classified as critical has been found in D-L…8.8
• CVE-2025-63690In pig-mesh Pig versions 3.8.2 and below, when setting up sc…9.1
• CVE-2025-63691In pig-mesh In Pig version 3.8.2 and below, within the Token…9.6