CVE-2018-20396

NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

Design/Logic Flaw

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x800020F4 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input...

CVE-2018-19522

CVE-2018-19522 involves DriverAgent 2.2015.7.14 with DrvAgent64.sys 1.0.0.1. The driver allows a user to send an IOCTL (0x800020F4) carrying user-controlled data, and the driver’s subroutine will execute a wrmsr instruction using the user buffer for partial input. This is a local impact scenario ...

CVE-2018-19522

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x800020F4 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input...

CVE-2018-20029

The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service BSOD because uninitialized memory can be read...

CVE-2018-19085

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges...

Cheetah Free WIFI 5.1 suffers from Denial of Service Vulnerability

Cheetah Free WiFi for PC is a free, minimalist wireless router. Cheetah Free WIFI 5.1 suffers from a denial of service vulnerability that originates from the driver liebaonat64.sys failing to perform strict checksums on incoming data during the processing of the ioctl code 0x830020E0 interface,...

Code injection

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10709

The CVE-2018-10709 entry concerns ASRock drivers: AsrDrv101.sys/AsrDrv102.sys in ASRock RGBLED, A-Tuning, F-Stream, RestartToUEFI. The described vulnerability arises from IOCTL interfaces that expose read/write access to CR register values, enabling local privilege escalation and potential code e...

kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel allows local users to cause a denial of service kernel memory exhaustion via multiple read accesses to files in the /sys/class/sasphy directory...

Denial of Service Vulnerability in Filpp Driver for Fertostat Security V7 Software

Fertostat Security V7 is a powerful antivirus with both anti-Trojan, anti-virus and anti-Rootkit features. A denial of service vulnerability exists in the filpp.sys driver in Fertostat Security V7, which can be exploited by an attacker to cause a blue screen on a computer, resulting in a denial o...

H2 Database 1.4.196 Remote Code Execution

Exploit Title: H2 Database 1.4.196 - Remote Code Execution Google Dork: N/A Date: 2018-09-24 Exploit Author: h4ckNinja Vendor Homepage: https://www.h2database.com/ Software Link: http://www.h2database.com/h2-2018-03-18.zip Version: 1.4.196 and 1.4.197 Tested on: macOS/Linux CVE: N/A This takes...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

Design/Logic Flaw

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

Code injection

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...

Buffer overflow

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402088 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for...

CVE-2018-16712

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...

CVE-2018-16711

CVE-2018-16711 affects IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys. Version 1.2.0.5 (and possibly earlier) allows a user to send an IOCTL (0x9C402088) containing user-controlled data. The driver’s subroutine will execute a wrmsr instruction using the us...