PT-2026-96033

Name of the Vulnerable Software and Affected Versions BioStar VIVID LED DJ version 4.0.2411.1500 Description A write-what-where condition exists in the IOCTL Handler component within the BS LED64.sys file. This issue occurs in the sub 1105C function when the AssociatedIrp argument is manipulated....

PT-2026-96034

Name of the Vulnerable Software and Affected Versions BioStar VALKYRIE AURORA version 2.10.2411.0800 Description A write-what-where condition exists in the IOCTL Handler component within the file BS RVSIO64.sys. This issue occurs when the PhysicalAddress argument is manipulated in the sub 1105C...

PT-2026-96036

Name of the Vulnerable Software and Affected Versions Hangzhou Shunwang Technology shzh version 10.7.2.693 Description A local issue exists within the IRP MJ DEVICE CONTROL Handler component in the shdrv x64.sys file. Specifically, the sub 180004AC0 function does not properly handle the PID...

CVE-2026-94128: Write-what-where Condition

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

PT-2026-96047

Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...

CVE-2026-94425: Improper Privilege Management

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...

CVE-2026-94146: Write-what-where Condition

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94424: Heap-based Buffer Overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

PT-2026-96039

Name of the Vulnerable Software and Affected Versions BioStar Temperature Monitor Utility version 1.2.1806.2200 Description A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the sub 1105C function when the PhysicalAddress...

CVE-2024-30804

ASUS 드라이버 LPE PoC 물리 메모리 남용 이것은 AsInsHelp64.sys 드라이버를 악용하는 로컬 권한 상승LPE PoC입니다. 합법적이고 서명된 ASUS 드라이버를 남용하여 물리 메모리를 매핑하고 커널 토큰을 덮어쓰며, 궁극적으로 NT AUTHORITY\SYSTEM 권한을 획득합니다. 🎯 취약점 정보 대상 : AsInsHelp64.sys ASUS 팬 Xpert v.10013 미만 관련 기법 : 임의 물리 메모리 읽기/쓰기 근본 원인 : 드라이버는 모든 사용자가 물리 메모리를 가상 주소 공간에 매핑할 수 있는...

Exploit for CVE-2009-3103

MS09-050 — SMBv2 Remote Code Execution Exploit CVE-2009-310...

PT-2026-94483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs when attempting to read the /sys/kernel/debug/ref tracker/ directory. This issue happens within the alloc netdev mqs function if either alloc percpu or dev...

PT-2026-94551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the Squashfs filesystem when a negative block offset is read from the disk, such as the offset into a decompressed fragment block. This issue is trigger...

PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

PT-2026-93391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS3 file system. The functions ntfs reparse init and ntfs objid init parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles. Thes...

PT-2026-93680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the NFSD component. A local administrator with CAP SYS ADMIN privileges can crash the kernel by triggering a state-revocation walk before the server...

PT-2026-93505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla2x00 write i2c and qla2x00 read i2c functions fail to perform bounds checks on the user-supplied length variable within the qla i2...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

CVE-2026-55774: Incorrect Authorization

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:leaseid in one namespace could revoke a lease in another namespace when the foreign leaseid was known, bypassing namespace ACL isolation. The affected lease lookup...

CVE-2026-90939

novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint, which lacks proper permission annotations . Authenticated attackers can retrieve password hashes and personal data (email addresses, phone numbers) for users within their data scope, enabling...