329 matches found
CVE-2024-34332
An issue in SiSoftware SANDRA v31.66 SANDRA.sys 15.18.1.1 and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API...
SiSoftware SANDRA Security Vulnerability
SiSoftware SANDRA is a benchmarking, system diagnostic and analysis tool from SiSoftware UK. A security vulnerability exists in SiSoftware SANDRA version 31.66 and earlier, which originates from an attacker who has elevated privileges by sending a crafted buffer to the kernel driver using the...
CVE-2024-34332
An issue in SiSoftware SANDRA (versions prior to v31.67 , specifically v31.66 and SANDRA.sys 15.18.1.1 and before) allows an attacker to escalate privileges . The root cause is the processing of a crafted buffer sent to the Kernel Driver via the DeviceIoControl Windows API. To remediate this, use...
CVE-2024-26507
The software products FinalWire AIRDA Extreme , AIDA64 Engineer , AIDA64 Business , and AIDA64 Network Audit (version 7.00.6700 and before) are vulnerable to a local privilege escalation issue. The root cause involves the DeviceIoControl call associated with components such as MmMapIoSpace , IoAl...
CVE-2024-34332
An issue in SiSoftware SANDRA v31.66 SANDRA.sys 15.18.1.1 and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API...
CVE-2024-26507
An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components...
CVE-2024-34332
An issue in SiSoftware SANDRA v31.66 SANDRA.sys 15.18.1.1 and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API...
CVE-2024-26507
An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components...
CVE-2024-34332: Improper Privilege Management
An issue in SiSoftware SANDRA v31.66 SANDRA.sys 15.18.1.1 and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API...
CVE-2024-26507: Improper Validation of Syntactic Correctness of Input
An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit through 7.00.6742 allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components...
CVE-2024-30804
An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...
CVE-2024-30804: Exposed IOCTL with Insufficient Access Control
An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...
CVE-2024-30804
The AsInsHelp64.sys driver, part of the ASUS Fan Xpert software (versions prior to v.10013), contains a vulnerability that allows an attacker to execute arbitrary code via crafted IOCTL requests. The root cause is an exposed IOCTL that allows unprivileged users to map arbitrary physical memory in...
CVE-2024-30804
An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...
CVE-2024-30804
An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...
Windows 11 22h2 - Kernel Privilege Elevation
// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation // Date: 2023-06-20 // country: Iran // Exploit Author: Amirhossein Bahramizadeh // Category : webapps // Vendor Homepage: // Tested on: Windows/Linux // CVE : CVE-2023-28293 include include // The vulnerable driver file name const ch...
Exploit for Untrusted Pointer Dereference in Microsoft
It is an exploit module targeting Apache HTTP Server. The target...
OffensiveRust
This is a collection of Rust code snippets, each implementing a different type of exploit or malicious functionality. The code is organized into several subdirectories, each containing a specific exploit or tool. Here's a summary of the code and its functionality: 1. AllocateWithSyscalls: This co...
Redragon Gaming Mouse - (REDRAGON_MOUSE.sys) Denial Of Service Exploit
Exploit Title: Redragon Gaming Mouse - 'REDRAGONMOUSE.sys' Denial-Of-Service PoC Exploit Author: Quadron Research Lab Version: all version Tested on: Windows 10 x64 HUN/ENG Professional Vendor: https://www.redragonzone.com/pages/download Reference:...