EUVD-2009-1819

Malware in sbrugna...

EUVD-2024-52766

Malicious code in bioql PyPI...

CVE-2025-1055

A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected ...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

A security vulnerability exists in the snxpcamd.sys component of the SUNIX Multi I/O Card v10.1.0.0 . Attackers can exploit this issue by supplying crafted IOCTL requests to perform arbitrary read and write actions . Proof-of-concept exploitation details have been observed in the wild. No specifi...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-39251

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests...

CVE-2024-33225

An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33224

An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33228

An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33228

The Insyde Software Corp SEG Windows Driver (version v100.00.07.02 ) contains a security vulnerability in the segwindrvx64.sys component. An attacker can exploit this flaw by sending crafted IOCTL requests to escalate privileges and execute arbitrary code . While the documents do not provide a sp...

CVE-2024-33226

A security vulnerability exists in the Access64.sys component of Wistron Corporation TBT Force Power Control v1.0.0.0 . Attackers can exploit this flaw by sending crafted IOCTL requests to achieve privilege escalation and arbitrary code execution . As a temporary workaround, it is recommended to ...

CVE-2024-33221

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33223

The IOMap64.sys component in ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 contains a security flaw related to insecure privilege management . An attacker can exploit this by sending crafted IOCTL requests to escalate privileges and execute arbitrary code . To mitigate this risk, it is recommend...

CVE-2024-33222

A security vulnerability exists in the ATSZIO64.sys component of the ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 . The root cause is an exposed IOCTL with insufficient access control , which allows an attacker to send crafted IOCTL requests to escalate privileges and execute arbitrary code ....

CVE-2024-33219

The ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver (version v1.0.1.0 ) is vulnerable due to an issue in the AsIO64.sys component. This security flaw allows an attacker to escalate privileges and execute arbitrary code by sending crafted IOCTL requests . While no patch is currently available, it ...

CVE-2024-30804

An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...

CVE-2024-30804

An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...

CVE-2024-30804

An issue discovered in the DeviceIoControl component in ASUS FanXpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests...