Memory corruption

The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calli...

CVE-2020-14979

The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calli...

CVE-2020-14979

CVE-2020-14979 affects WinRing0.sys/WinRing0x64.sys driver version 1.2.0 used by EVGA Precision X1 up to 1.0.6. The vulnerability permits local privilege escalation by reading/writing arbitrary physical memory via mapping \Device\PhysicalMemory, enabling NT AUTHORITY\SYSTEM access. Exploitation c...

PT-2020-6995

Name of the Vulnerable Software and Affected Versions EVGA Precision X1 versions through 1.0.6 winring0 project winring0 version 1.2.0 Description The WinRing0.sys and WinRing0x64.sys drivers versions 1.2.0 in EVGA Precision X1 through 1.0.6 contain a flaw that allows local users, including those...

Zyxel Armor X1 WAP6806 - Directory Traversal Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal Exploit Author: Rajivarnan R Vendor Homepage: https://www.zyxel.com/ Software http://www.zyxelguard.com/WAP6806.asp Version: V1.00ABAL.6C0 CVE: 2020-14461 Tested on: Linux Mint /...

Zyxel Armor X1 WAP6806 Directory Traversal

Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal Date: 2020-06-19 Exploit Author: Rajivarnan R Vendor Homepage: https://www.zyxel.com/ Software http://www.zyxelguard.com/WAP6806.asp Version: V1.00ABAL.6C0 CVE: 2020-14461 Tested on: Linux Mint / Windows 10 Vulnerabilities Discovered Dat...

Zyxel Armor X1 WAP6806 - Directory Traversal

Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal Date: 2020-06-19 Exploit Author: Rajivarnan R Vendor Homepage: https://www.zyxel.com/ Software http://www.zyxelguard.com/WAP6806.asp Version: V1.00ABAL.6C0 CVE: 2020-14461 Tested on: Linux Mint / Windows 10 Vulnerabilities Discovered Dat...

ZyXEL Armor X1 WAP6806 Path Traversal Vulnerability

ZyXEL Armor X1 WAP6806 is a wireless network card product from ZyXEL Taiwan, China. A path traversal vulnerability exists in ZyXEL Armor X1 WAP6806 version 1.00ABAL.6C0. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a...

CVE-2020-14461

Zyxel Armor X1 WAP6806 1.00ABAL.6C0 devices allow Directory Traversal via the images/eaZy/ URI...

CVE-2020-14461

Zyxel Armor X1 WAP6806 1.00ABAL.6C0 devices allow Directory Traversal via the images/eaZy/ URI...

Directory traversal

Zyxel Armor X1 WAP6806 1.00ABAL.6C0 devices allow Directory Traversal via the images/eaZy/ URI...

CVE-2020-14461

Zyxel Armor X1 WAP6806 1.00ABAL.6C0 devices allow Directory Traversal via the images/eaZy/ URI...

CVE-2020-14461

CVE-2020-14461 affects Zyxel Armor X1 WAP6806, version 1.00(ABAL.6)C0. The vulnerability is a directory traversal via the images/eaZy/ URI, allowing access to locations outside of a restricted directory. CVSS details in the primary entry indicate a high-severity impact (CVSSv3.1 base 8.6) with ne...

PT-2020-14021 · Zyxel · Zyxel Armor X1 Wap6806

Name of the Vulnerable Software and Affected Versions: Zyxel Armor X1 WAP6806 version 1.00ABAL.6C0 Description: The issue allows Directory Traversal via the images/eaZy/ URI. Recommendations: For Zyxel Armor X1 WAP6806 version 1.00ABAL.6C0, restrict access to the images/eaZy/ URI to minimize the...

CVE-2020-11716

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

Design/Logic Flaw

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

PT-2020-12802 · Panasonic · Eluga X1 Pro +2

Name of the Vulnerable Software and Affected Versions: Panasonic P110 versions through 2020-04-10 Eluga Z1 Pro versions through 2020-04-10 Eluga X1 versions through 2020-04-10 Eluga X1 Pro versions through 2020-04-10 Description: The issue is related to Insecure Permissions. The vendor has stated...

PT-2020-10226 · Realtek +2 · Realtek Audio Driver +2

Name of the Vulnerable Software and Affected Versions: Realtek Audio Drivers for Windows versions prior to 6.0.8882.1 Realtek Audio Drivers for Windows versions prior to 6.0.8907.1 Description: The issue concerns the mishandling of DLL preloading by Realtek Audio Drivers for Windows, as used in...

Design/Logic Flaw

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...