CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

Direct Rendering Infrastructure GPU Heap Buffer Overflow DoS

The vulnerability of the radeonacpivfctbios function in the drivers/gpu/drm/radeon/radeonbios.c driver of the Direct Rendering Infrastructure DRI video card for Linux operating systems is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system...

DRI driver Kernel Heap Buffer Overflow DoS

The vulnerability of the generatelfpdataptrs function in the drivers/gpu/drm/i915/display/intelbios.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

Fujitsu BIOS Driver buffer error vulnerability

Fujitsu BIOS Driver is a system driver from Fujitsu Japan. A buffer error vulnerability exists in Fujitsu BIOS Driver versions prior to 2.5.0.0, which stems from a lack of sufficient validation of inputs, and could allow an attacker to compromise the confidentiality, integrity, and availability o...

EUVD-2022-51777

Malicious code in bioql PyPI...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

ASUS BIOS Flash Driver security vulnerability

ASUS BIOS Flash Driver is a driver from the Chinese company Asus ASUS. A security vulnerability exists in ASUS BIOS Flash Driver version v3.2.12.0, which originates from a security flaw in the component AsusBSItf.sys. The vulnerability can be exploited by an attacker to elevate privileges and...

CVE-2022-48188

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code...

CVE-2022-48188

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code...

CVE-2022-48188

The CVE-2022-48188 issue affects Lenovo Desktop and ThinkStation systems, specifically a buffer overflow in the SecureBootDXE BIOS driver. The root cause is in the BIOS component (SecureBootDXE) that could be invoked locally to escalate privileges and execute arbitrary code. Documents consistentl...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4435

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434: Buffer Over-read

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2021-4212

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code...