CVE-2018-10711

The CVE-2018-10711 entry concerns ASRock driver components AsrDrv101.sys and AsrDrv102.sys used by ASRock RGBLED, A-Tuning, F-Stream, and RestartToUEFI. The driver versions listed expose functionality to read/write Machine Specific Registers (MSRs), enabling execution of arbitrary ring-0 code on ...

CVE-2018-10710

The CVE-2018-10710 entry concerns ASRock drivers: AsrDrv101.sys and AsrDrv102.sys in ASRock RGBLED, A-Tuning, F-Stream, and RestartToUEFI expose IOCTLs that read/write arbitrary physical memory. This enables local privilege escalation by a user with low privileges. Affected versions are ASRock RG...

ASRock Drivers - Privilege Escalation

ASRock Drivers - Privilege Escalation SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...

ASRock Drivers - Privilege Escalation

SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...

ASRock Drivers Privilege Escalation / Code Execution Exploit

ASRock offers several utilities designed to give the user with an ASRock motherboard more control over certain settings and functions. These utilities include various features like the RGB LED control, hardware monitor, fan controls, and overclocking/voltage options. Multiple vulnerabilities were...

ASRock Drivers Privilege Escalation / Code Execution

SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ ASRock Drivers Elevation of Privilege Vulnerabilities 1. Advisory Information Title: ASRock Drivers Elevation of Privilege Vulnerabilities Advisory ID: CORE-2018-0005 Advisory URL:...

tw.asrock.com XSS vulnerability

Open Bug Bounty ID: OBB-678554 Description| Value ---|--- Affected Website:| tw.asrock.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

asrock.com XSS vulnerability

Open Bug Bounty ID: OBB-671658 Description| Value ---|--- Affected Website:| asrock.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Black Hat 2018: Update Mechanisms Allow Remote Attacks on UEFI Firmware

LAS VEGAS – Researchers said they found buffer overflow flaws in the firmware for ASRock and ASUS, potentially enabling bad actors to remotely launch man-in-the-middle MITM attacks. The findings, which will be presented Wednesday at Black Hat USA this week by researchers from Eclypsium, show that...

SQL Injection Vulnerability in Website Building System of ASTRONIC TECHNOLOGY CO.

Kirkland Technology Ltd. provides innovative IT solutions and design services to our clients. A SQL injection vulnerability exists in the website builder system of ASRock Technology Limited. An attacker can exploit the vulnerability to obtain sensitive information of the database...

SQL Injection Vulnerability in ASRock's Website CMS

TechSpring Technology Limited is a one-stop IT solution provider. A SQL injection vulnerability exists in ASRock's website builder CMS. Attackers can exploit the vulnerability to obtain sensitive database information...

tw.asrock.com XSS vulnerability

Vulnerable URL: http://tw.asrock.com/general/404.asp?ln=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check tw.asrock.com SSL...

asrock.com XSS vulnerability

Vulnerable URL: http://www.asrock.com/support/support.asp?Model= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10187 VIP website status:| Yes Check asrock.com SSL connection:|...

tw.asrock.com XSS vulnerability

Vulnerable URL: http://tw.asrock.com/mb/spec/card.asp?Model=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check tw.asrock.com SS...

asrock.com.tw XSS vulnerability

Vulnerable URL: http://www.asrock.com.tw/support/support.asp?Model= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 331024 VIP website status:| No Check asrock.com.tw SSL connection...

asrock.com XSS vulnerability

Vulnerable URL: http://www.asrock.com/support/index.cn.asp?Model="...

europe.asrock.com XSS vulnerability

Vulnerable URL: http://europe.asrock.com/mb/spec/card.asp?Model=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

asrock.com.tw XSS vulnerability

Vulnerable URL: http://www.asrock.com.tw/mb/spec/card.asp?Model=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 331024 VIP website status:| No Check asrock.com.tw SSL connection:|...

asrock.com XSS vulnerability

Vulnerable URL: http://www.asrock.com/general/404.asp?ln=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10259 VIP website status:| Yes Check asrock.com SSL connection:| Grade: F...

asrock.com.tw XSS vulnerability

Vulnerable URL: http://www.asrock.com.tw/support/index.asp?Model=" Details: Description| Value ---|--- Patched:| Yes, at 15.05.2017 Latest check for patch:| 15.05.2017 13:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 323400 VIP website status:| No Check...