CVE-2024-30804

PoC de LPE del controlador ASUS Abuso de memoria física Esta es una PoC para Escalada de Privilegios Local LPE que explota el controlador AsInsHelp64.sys. Abusa de un controlador legítimo y firmado de ASUS para mapear memoria física y sobrescribir tokens del kernel, obteniendo finalmente...

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Exploit de escalación local sin privilegios para AsIO3.sys de ASUS - Bypass de autenticación TOCTOU + Decremento de PreviousMode CVE-2025-3464: Escalación de Privilegios Local en AsIO3.sys Este exploit solo funciona en Windows 11 22H2 o anterior. Microsoft...

SmmExploit

SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Brief description ASUS RT-AX56U V2 & RT-AC86U router firmwares below or equal to version 3.0.0.4.38650460 and 3.0.0.438651529 respectively have a format string vulnerability in the detwan.cgi function of the httpd service that can cau...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2021-3166

An issue was discovered on Asus DSL-N14UB1 v.1.1.2.3805. An attacker can upload any file to the Firmware box as long as it is renamed as SettingsProductName.trx eg. SettingsDSL-N14U-B1.trx. Once the file is loaded, shutdown measures on a wide range of services are triggered as if it were a real...

EUVD-2026-82232

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...

CVE-2026-93124

CVE-2026-93124 affects the asus-wireless platform/x86 driver in the Linux kernel . The root cause is that asus_wireless_probe() returns success even when acpi_match_acpi_device() finds no match, storing a NULL companion pointer . When the driver is force-bound to a device without an ACPI companio...

EUVD-2026-82224

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However, the error path labels are out of order relative to the registration...

CVE-2026-93116

CVE-2026-93116 affects the Linux kernel's asus-wmi platform driver (platform/x86). The root cause is out-of-order error path labels in the asus_wmi_add() probe function. When subsystem initialization partially fails, the misordered labels cause the driver to skip cleanup for previously registered...

EUVD-2026-81992

In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus driver: - unchecked size in asusrawevent - unclean teardown of asusprobe on failure - possible use-after-free in asuspro...

CVE-2026-90331

CVE-2026-90331 affects the hid-asus driver in the Linux kernel . Multiple defects were identified: an unchecked size in asus_raw_event(), a possible use-after-free in asus_probe, unclean teardown on probe failure, sleeping calls in atomic context , and incorrect packet sizes sent to the keyboard ...

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...

CVE-2020-36109-POC

CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/tin-z Detalles de la vulnerabilidad El firmware del router ASUS RT-AX86U por debajo de la versión 9.0.0.4386 tiene un desbordamiento de búfer en la función blockingrequest.cgi del módulo httpd que puede causar ejecución de código cuando u...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit IDs de CVE CVE-2019-11061 : Control de acceso roto en HG100 Productos afectados : ASUS SmartHome Gateway HG100 Versión de firmware Productos afectados : Aplicación ASUS SmartHome Android APP versión 3.0.45190701 Descripción Si el atacante está en la misma red interna que el...

ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub Update TOCTOU LPE ASUS DriverHub Driver Update Process TOCTOU Vulnerability Leading to LPE Technical Resources Technical Presentation PDF 한국어.md | English.md Asus Hall of Fame Afterword...

asus-i005-cve-2026-43499

asus-i005-cve-2026-43499 CVE-2026-43499 GhostLock 在 ASUS ROG Phone 5S ASUSI005 上的适配研究。 结论：漏洞触发与栈回收完整验证；提权链被 KASLR leak 阻断。 TL;DR 阶段| 内容| 状态 ---|---|--- 0| UAF 触发（3 线程 + CMPREQUEUEPI）| ✅ 1| pselect timeout=0 栈回收（shift=10）| ✅ 1.6| W 内核栈 SP 泄漏（perf PERFSAMPLEREGSINTR）| ✅ 2| 任意地址写（需 KASLR slide）| ❌ —...

CVE-2024-3912

Why? Publishing because Mirai are a bunch of irritating twats that keep popping my honeypot with it - you're not the malware I am after. Fek off please. Here's their irritating malware distribution IP and defualt payload script. http://130.12.180.69/bins/kla.sh Description Asus router arbitrary...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87U TFTP is vulnerable to Denial of ServiceDoS attack 1. NAME OF AFFECTED PRODUCTS AND VERSIONS ASUS RT-AC87U 3.0.0.4.38251640 2. PROBLEM TYPE Its primarily related to CWE-20, TFTP service running in ASUS...