CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC per GIGABYTE APP Center v1.05.21 e precedenti Solo perché il tuo target non è memory safe non significa che il tuo exploit debba esserlo! Vulnerabilità utilizzate: CVE-2018-19320 - funzionalità ring0 simile a memcpy CVE-2018-19323 - lettura e scrittura dei Machine...

CVE-2018-19320

CVE-2018-19320 Explorando funcionalidade semelhante a memcpy do ring0 para desabilitar o Driver Signing Enforcement DSE conforme documentado aqui: http://deniable.org/windows/windows-callbacks Referências https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

GIGABYTE XTREME GAMING ENGINE < 1.26 Multiple Vulnerabilities

The version of GIGABYTE XTREME GAMING ENGINE installed on the remote host is prior to 1.26. It is, therefore, affected by multiple vulnerabilities as referenced in GIGABYTE security advisory 1801: - The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE befor...

Information disclosure

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...