CVE-2021-27965

CVE-2021-27965 MsIo64.sys 드라이버1.1.19.1016 이전 및 MSI Dragon Center2.0.98.0 이전에서 버퍼 오버플로우가 발생하여, 0x80102040, 0x80102044, 0x80102050 또는 0x80102054 IOCTL 요청을 통해 권한 상승이 가능합니다. 이 익스플로잇은 완성될 것이며, 이는 보장합니다...

CVE-2021-29337

CVE-2021-29337 - MODAPI.sysMSI Dragon Center에서의 권한 상승 일반 영향을 받는 제품: MSI Dragon Center 영향을 받는 버전: 2.0.104.0 CVE MITRE 설명 Dragon Center의 취약한 커널 드라이버 MODAPI.sys는 IOCTL 0x9C406104를 노출하며, 이로 인해 낮은 권한의 사용자가 물리적 메모리를 가상 주소 공간에 매핑하는 여러 드라이버 루틴MmMapIoSpace 중 하나를 호출하여 물리적 메모리와 직접 상호 작용할 수 있습니다...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC CVE-2024-12227에 대한 개념 증명 - MSI Dragon Center의 NTIOLibX64.sys 드라이버에서 널 포인터 역참조 취약점. 설명 NTIOLibX64.sys 버전 3.0.0.10은 ReadPhysicalMemory 함수IOCTL 0xC3506104에서 널 포인터 역참조 취약점을 포함합니다. 드라이버는 MmMapIoSpace를 호출한 후 MmUnmapIoSpace를 호출하기 전에 반환 값을 확인하지 않습니다. MmMapIoSpace가...

LolModapi

ハッカーの皆さん、こんにちは。 これはMSI Dragon Center 2.0.155.0がインストールするカーネルドライバー、MODAPI.sys内の認証不要のMSR書き込みです。このドライバーは、任意のローカルユーザーが管理者権限やUACなしで開けるセキュリティ記述子を持つデバイスオブジェクトを公開しています。ハンドルを取得してしまえば、MSRインデックスにホワイトリストはないため、好きなMSRを読み書きできます。 読み取り側だけでもKASLRを破壊できます。IA32LSTAR 0xC0000082...

CVE-2026-82908

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

EUVD-2026-68766

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908

MSI Dragon Center up to version 2.0.155.0 contains an integer overflow in the function MmioWritePath within the driver NTIOLib_X64.sys (component: MMIO Write Path Handler). The overflow is triggered by manipulating the argument count or elementSize parameters. Exploitation requires a local attack...

CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

PT-2026-83984

Name of the Vulnerable Software and Affected Versions MSI Dragon Center versions prior to 2.0.155.0 Description An integer overflow occurs in the MMIO Write Path Handler component within the NTIOLib X64.sys library. This issue is triggered by manipulating the argument count or elementSize within...

CVE-2026-82908: Integer Overflow or Wraparound

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

EUVD-2021-15973

Malware in sbrugna...

EUVD-2021-31701

Malicious code in bioql PyPI...

EUVD-2024-50694

Malicious code in bioql PyPI...

CVE-2024-12227

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2021-29337

MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory...

CVE-2021-44901

Micro-Star International MSI Dragon Center = 2.0.116.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by...

CVE-2024-12227

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...