Razer Synapse rzpnk.sys ZwOpenProcess

A vulnerability exists in the latest version of Razer Synapse v2.20.15.1104 as of the day of disclosure which can be leveraged locally by a malicious application to elevate its privileges to those of NTAUTHORITY\SYSTEM. The vulnerability lies in a specific IOCTL handler in the rzpnk.sys driver th...

CVE-2014-7685

The Razer Comms - Gaming Messenger aka com.razerzone.comms application 1.3.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Razer Comms - Gaming Messenger aka com.razerzone.comms application 1.3.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7685

The CVE-2014-7685 entry concerns the Razer Comms (com.razerzone.comms) Android app version 1.3.07, which fails to verify X.509 certificates from SSL servers. This weakens TLS, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The conne...

CVE-2014-7685

The Razer Comms - Gaming Messenger aka com.razerzone.comms application 1.3.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7685: Undefined Security Weakness

The Razer Comms - Gaming Messenger aka com.razerzone.comms application 1.3.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Windows Gather Razer Synapse Password Extraction

This module will enumerate passwords stored by the Razer Synapse client. The encryption key and iv is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. Affects versions earlier than 1.7.15. This module requires Metasploit:...

Razer official site mysql injection vulnerability and fix-vulnerability warning-the black bar safety net

Brief description: sql query filter is not strict lead to typical blinds,you can get the database information. Detailed description: the aid parameter of the presence of the injection, nothing to explain. Vulnerability to prove:this page will return to normal this page returns an exception...

Gaming Mouse-Maker Razer Hit With Infected Firmware

Gamers trying to update their mouse or keyboard drivers from accessory maker Razer USA’s Web site recently may have gotten more than they bargained for. According to the IDG News Service, the company’s computers appear to have been hacked, and its support site used to spread malicious Trojan hors...