CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC for GIGABYTE APP Center v1.05.21 and earlier Just because your target is memory unsafe doesn't mean your exploit has to be! Vulnerabilities used : CVE-2018-19320 - ring0 memcpy-like functionality CVE-2018-19323 - read and write Machine Specific Registers MSRs...

KnockGiga

hi hackers. gdrv3.sys is the signed kernel driver that ships with Gigabyte App Center and EasyTune. It creates \.\GIOV3 with no security descriptor, so any local user can open it no admin, no UAC. Two of its IOCTLs are the whole story. The first one 0xC3502019 says it reads physical memory. You...

CVE-2019-7630

An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation o...

NVIDIA NvContainer Driver Hard-coded Constants

The vulnerability of NVIDIA NvContainer driver components in the NVIDIA App utility is related to the use of strictly encoded constants. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

EUVD-2019-17163

Malware in sbrugna...

MAL-2025-7049 Malicious code in @amber-team/app-center-utils (npm)

The package @amber-team/app-center-utils was found to contain malicious code...

MAL-2025-7102 Malicious code in @avocado-team/app-center-app-widget (npm)

The package @avocado-team/app-center-app-widget was found to contain malicious code...

MAL-2025-7103 Malicious code in @avocado-team/app-center-mini-landing (npm)

The package @avocado-team/app-center-mini-landing was found to contain malicious code...

MAL-2025-7104 Malicious code in @avocado-team/app-center-sdk-for-white-team (npm)

The package @avocado-team/app-center-sdk-for-white-team was found to contain malicious code...

MAL-2025-9564 Malicious code in @tiktok-frontend/app-center-connect (npm)

The package @tiktok-frontend/app-center-connect was found to contain malicious code...

Malicious code in @tiktok-frontend/app-center-connect (npm)

The package @tiktok-frontend/app-center-connect was found to contain malicious code...

Malicious code in @amber-team/app-center-utils (npm)

The package @amber-team/app-center-utils was found to contain malicious code...

Malicious code in @avocado-team/app-center-app-widget (npm)

The package @avocado-team/app-center-app-widget was found to contain malicious code...

Malicious code in @avocado-team/app-center-sdk-for-white-team (npm)

The package @avocado-team/app-center-sdk-for-white-team was found to contain malicious code...

Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million Devices

Cybersecurity researchers have found "backdoor-like behavior" within Gigabyte systems, which they say enables the UEFI firmware of the devices to drop a Windows executable and retrieve updates in an unsecure format. Firmware security firm Eclypsium said it first detected the anomaly in April 2023...

GIGABYTE APP Center < 19.4.22.1 Multiple Vulnerabilities

The version of GIGABYTE APP Center installed on the remote host is prior to 19.4.22.1. It is, therefore, affected by multiple vulnerabilities as referenced in GIGABYTE security advisory 1801: - The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.5...

GIGABYTE OC GURU II 2.08 Multiple Vulnerabilities

The version of GIGABYTE OC GURU II installed on the remote host is 2.08. It is, therefore, affected by multiple vulnerabilities as referenced in GIGABYTE security advisory 1801: - The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMI...

GIGABYTE APP CENTER Installed (Windows)

Binary data gigabyteappcenterwininstalled.nbin...

GDrv Driver Code Execution

The vulnerability of the GDrv driver, a program for configuring Gigabyte Aorus Engine graphics cards, the GIGABYTE App Center, and the Extreme Gaming Engine status monitoring program is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to execute arbitrar...