31 matches found
EUVD-2009-1819
Malware in sbrugna...
EUVD-2024-52766
Malicious code in bioql PyPI...
CVE-2025-1055
A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected ...
CVE-2024-55411
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
CVE-2024-55411
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
CVE-2024-55411: Incorrect Permission Assignment for Critical Resource
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
CVE-2024-55411
The SUNIX Multi I/O Card version v10.1.0.0 contains a security vulnerability in the snxpcamd.sys component. This flaw allows an attacker to perform arbitrary read and write actions by supplying specially crafted IOCTL requests . This issue is associated with CWE-732 (Incorrect Permission Assignme...
CVE-2024-55408
An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...
CVE-2024-39251
An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests...
CVE-2024-33224
An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33225
An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33228
An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33228
The Insyde Software Corp SEG Windows Driver (version v100.00.07.02 ) is vulnerable due to a flaw in the segwindrvx64.sys component. Attackers can exploit this by sending crafted IOCTL requests to achieve privilege escalation and arbitrary code execution . As a mitigation, it is recommended to dis...
CVE-2024-33226
The Wistron Corporation TBT Force Power Control (version v1.0.0.0 ) is affected by a privilege escalation vulnerability in the Access64.sys component. An attacker can execute arbitrary code by sending crafted IOCTL requests . To mitigate this risk, it is recommended to restrict access to the Acce...
CVE-2024-33221
An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33223
The IOMap64.sys component in ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 is vulnerable to improper privilege management . An attacker can escalate privileges and execute arbitrary code by sending crafted IOCTL requests . To mitigate this risk, it is recommended to disable the IOMap64.sys compo...
CVE-2024-33222
The ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 is vulnerable to a privilege escalation and arbitrary code execution flaw. The root cause is a security flaw in the ATSZIO64.sys component, which allows an attacker to execute these actions by sending crafted IOCTL requests . As a mitigation, i...
CVE-2024-33219
A security vulnerability exists in the AsIO64.sys component of the ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 . The root cause is an exposed IOCTL with insufficient access control (CWE-782), which allows an attacker to escalate privileges and execute arbitrary code by sending crafte...
CVE-2024-33219: Exposed IOCTL with Insufficient Access Control
An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33226: Improper Privilege Management
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...