620 matches found
threat-dragon
build latest practices OWASP Threat Dragon OWASPowasp Threat Dragonproject is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source communit...
CVE-2021-29337
CVE-2021-29337 - Privilege Escalation in MODAPI.sys MSI Dragon Center General Affected Product: MSI Dragon Center Affected Version: 2.0.104.0 CVE MITRE Description A vulnerable kernel driver MODAPI.sys in dragon center exposes IOCTL 0x9C406104 which allows low-privileged users to interact directl...
dragondance
Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...
HydraDragonAntivirus
Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. š For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. š„ POC:...
CVE-2021-27965
CVE-2021-27965 The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request. This exploit will be finished, this is a guarantee...
POC-CVE-2024-12227
CVE-2024-12227 - NTIOLibX64.sys DoS PoC Proof of Concept for CVE-2024-12227 - Null Pointer Dereference vulnerability in MSI Dragon Center's NTIOLibX64.sys driver. Description NTIOLibX64.sys version 3.0.0.10 contains a null pointer dereference vulnerability in the ReadPhysicalMemory function IOCTL...
LolModapi
hi hackers. This one is an unauthenticated MSR write inside MODAPI.sys, the kernel driver that MSI Dragon Center 2.0.155.0 installs. The driver exposes a device object with a security descriptor that lets any local user open it, no admin and no UAC. Once you have the handle there is no whitelist ...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon es una aplicaciĆ³n gratuita, de cĆ³digo abierto y multiplataforma de modelado de amenazas que incluye diagramaciĆ³n del sistema y un motor de reglas para generar automĆ”ticamente amenazas/mitigaciones. Es un Proyecto Incubador de OWASP. El enfoque del proyecto estĆ” e...
django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-15307 via django (3.1.13)
django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...
HydraDragonAntivirus openedr-v2-release-portable-9
Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. š For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. š„ POC:...
HydraDragonAntivirus openedr-v2-release-9
Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. š For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. š„ POC:...
CVE-2026-82908
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
CVE-2026-82908
MSI Dragon Center up to version 2.0.155.0 contains an integer overflow in the function MmioWritePath within the driver NTIOLib_X64.sys (component: MMIO Write Path Handler). The overflow is triggered by manipulating the argument count or elementSize parameters. Exploitation requires a local attack...
CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
CVE-2026-82908 MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
EUVD-2026-68766
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
PT-2026-83984
Name of the Vulnerable Software and Affected Versions MSI Dragon Center versions prior to 2.0.155.0 Description An integer overflow occurs in the MMIO Write Path Handler component within the NTIOLib X64.sys library. This issue is triggered by manipulating the argument count or elementSize within...
CVE-2026-82908: Integer Overflow or Wraparound
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack...
django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-15830 via django (3.1.13)
django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...