545 matches found
CVE-2024-12227
MSI Dragon Center up to version 2.0.146.0 is affected by a local, null-pointer dereference in the IOCTL Handler via NTIOLib_X64.sys (MmUnMapIoSpace). The issue arises in the ReadPhysicalMemory/Ioctl 0xC3506104 path when MmMapIoSpace may return NULL and the code uses the pointer without validation...
CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference
A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...
PT-2024-17493 · Msi · Ntiolib X64.Sys +1
Name of the Vulnerable Software and Affected Versions: MSI Dragon Center versions up to 2.0.146.0 Description: A problematic issue was found in the IOCTL Handler component of MSI Dragon Center, affecting the MmUnMapIoSpace function in the NTIOLib X64.sys library. This leads to a null pointer...
Micro-Star Dragon Center 安全漏洞
Micro-Star Dragon Center is an application from Micro-Star China that is used to manage and control MSI components, desktop systems, and peripherals. A security vulnerability exists in Micro-Star Dragon Center version 2.0.146.0 and prior versions, which originates from a null pointer dereference...
CVE-2024-50804
MSI Center Pro 2.1.37.0 contains an insecure permissions vulnerability that permits a local attacker to execute arbitrary code via the Device_DeviceID.dat.bak file located in C:\ProgramData\MSI\One Dragon Center\Data. Affected component: MSI Center Pro; root cause: improper access control on a da...
PT-2024-34415 · Micro Star International · Msi Center Pro
Name of the Vulnerable Software and Affected Versions: Micro-star International MSI Center Pro version 2.1.37.0 Description: The issue allows a local attacker to execute arbitrary code via the Device DeviceID.dat.bak file within the C:ProgramDataMSIOne Dragon CenterData folder. This is due to an...
MAL-2024-2243 Malicious code in down_load_epub_the_bear_and_the_dragon_howm75 (npm)
--- -= Per source details. Do not edit below this line.=-...
Sharp Dragon’s Foray into African and Caribbean Governance Networks
...
New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts
The China-linked threat actor known as Sharp Panda has expanded their targeting to include governmental organizations in Africa and the Caribbean as part of an ongoing cyber espionage campaign. "The campaign adopts Cobalt Strike Beacon as the payload, enabling backdoor functionalities like C2...
编号撤回
OpenAnolis Dragon Lizard OS is a Linux operating system open-sourced by Dragon Lizard OS OpenAnolis. This CVE number has been withdrawn...
vietnamdragontravel.com Cross Site Scripting vulnerability OBB-3910360
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dragon-models.com Cross Site Scripting vulnerability OBB-3861970
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz
The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar's Ministry of Defence and Foreign Affairs as part of twin campaigns designed to deploy backdoors and remote access trojans. The findings come from CSIRT-CTI, which said the activities took place in November...
vietnamdragontravel.com Cross Site Scripting vulnerability OBB-3839527
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dragon-solution.com Improper Access Control vulnerability OBB-3797615
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Popular Dragon Touch Tablet for Kids Infected with Corejava Malware
By Deeba Ahmed The budget tablet, advertised for kids on Amazon, is highly popular among children. This is a post from HackRead.com Read the original post: Popular Dragon Touch Tablet for Kids Infected with Corejava Malware...
CVE-2023-47373
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-47373
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims...
