CVE-2026-94129

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

EUVD-2026-83824

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94129 BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128

BioStar VIVID LED DJ 4.0.2411.1500 contains a write-what-where vulnerability in the IOCTL Handler (function sub_1105C of BS_LED64.sys). Manipulation of the AssociatedIrp argument allows a local attacker with low privileges to corrupt memory, leading to high impact on confidentiality, integrity, a...

EUVD-2026-83823

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94424: Heap-based Buffer Overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-61681: Server-Side Request Forgery (SSRF)

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integrations/ingestors/sns/sns.go calls http.Get on payload.UnsubscribeURL after VerifyPayload even though BuildSignature...

CVE-2026-94216: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

CVE-2026-94146: Write-what-where Condition

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94142: Write-what-where Condition

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub1105C of the file BSHWMIO64W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where...

CVE-2026-94139: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...

CVE-2026-94137: Improper Resource Shutdown or Release

A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub180004AC0 of the file shdrvx64.sys of the component IRPMJDEVICECONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally...

CVE-2026-94129: Write-what-where Condition

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub1105C of the file BSRVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be...

CVE-2026-94128: Write-what-where Condition

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94096: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

PT-2026-96047

Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...

PT-2026-96039

Name of the Vulnerable Software and Affected Versions BioStar Temperature Monitor Utility version 1.2.1806.2200 Description A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the sub 1105C function when the PhysicalAddress...

PT-2026-96318

Name of the Vulnerable Software and Affected Versions Moore Threads MTT S80 Driver Package version 340.150 Description Improper privilege management exists within the IOCTL Handler component of the mtdispkm64.sys library. Specifically, the sub 140006F0C function can be manipulated by a local...

PT-2026-96223

Name of the Vulnerable Software and Affected Versions ColorFul iGameCenter version 1.0.3.4 Description A weakness exists in the IOCTL Handler component within the ene.sys library. Specifically, the sub 140001AF0 function is susceptible to untrusted pointer dereference, which occurs when a program...