CVE-2018-19522

CVE-2018-19522 involves DriverAgent 2.2015.7.14 with DrvAgent64.sys 1.0.0.1. The driver allows a user to send an IOCTL (0x800020F4) carrying user-controlled data, and the driver’s subroutine will execute a wrmsr instruction using the user buffer for partial input. This is a local impact scenario ...

CVE-2018-19522: Improper Input Validation

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x800020F4 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input...

PT-2018-14980

Name of the Vulnerable Software and Affected Versions DriverAgent version 2.2015.7.14 Description The issue allows a user to send an IOCTL 0x800020F4 with a buffer containing user-defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input...

CVE-2018-20029

The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service BSOD because uninitialized memory can be read...

CVE-2018-19085

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges...

PT-2018-2302

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.15.x through 4.19.x before 4.19.2 Description The issue is related to the map write function in kernel/user namespace.c, which mishandles nested user namespaces with more than 5 UID or GID ranges. This allows a user wit...

Cheetah Free WIFI 5.1 suffers from Denial of Service Vulnerability

Cheetah Free WiFi for PC is a free, minimalist wireless router. Cheetah Free WIFI 5.1 suffers from a denial of service vulnerability that originates from the driver liebaonat64.sys failing to perform strict checksums on incoming data during the processing of the ioctl code 0x830020E0 interface,...

PT-2018-14727

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0 Description An issue in PublicCMS allows cross-site scripting XSS by modifying the page list "attached" attribute. This can be achieved through an SQL statement, such as 'UPDATE sys module SET attached = "XSS" WHERE...

Code injection

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10709

The CVE-2018-10709 entry concerns ASRock drivers: AsrDrv101.sys/AsrDrv102.sys in ASRock RGBLED, A-Tuning, F-Stream, RestartToUEFI. The described vulnerability arises from IOCTL interfaces that expose read/write access to CR register values, enabling local privilege escalation and potential code e...

kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel allows local users to cause a denial of service kernel memory exhaustion via multiple read accesses to files in the /sys/class/sasphy directory...

CVE-2018-10709: Incorrect Permission Assignment for Critical Resource

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways to ultimately run...

CVE-2018-10710: Incorrect Permission Assignment for Critical Resource

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

CVE-2018-10712: Incorrect Permission Assignment for Critical Resource

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run co...

CVE-2018-10711: Improper Input Validation

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

PT-2018-10059

Name of the Vulnerable Software and Affected Versions ASRock RGBLED versions prior to 1.0.35.1 A-Tuning versions prior to 3.0.210 F-Stream versions prior to 3.0.210 RestartToUEFI versions prior to 1.0.6.2 Description The issue allows a local attacker to elevate privileges by leveraging the expose...

Denial of Service Vulnerability in Filpp Driver for Fertostat Security V7 Software

Fertostat Security V7 is a powerful antivirus with both anti-Trojan, anti-virus and anti-Rootkit features. A denial of service vulnerability exists in the filpp.sys driver in Fertostat Security V7, which can be exploited by an attacker to cause a blue screen on a computer, resulting in a denial o...

H2 Database 1.4.196 Remote Code Execution

Exploit Title: H2 Database 1.4.196 - Remote Code Execution Google Dork: N/A Date: 2018-09-24 Exploit Author: h4ckNinja Vendor Homepage: https://www.h2database.com/ Software Link: http://www.h2database.com/h2-2018-03-18.zip Version: 1.4.196 and 1.4.197 Tested on: macOS/Linux CVE: N/A This takes...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...