Input validation

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222044...

Input validation

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002000...

CVE-2018-8895

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

CVE-2018-8896

In 2345 Security Guard 3.6, the driver file 2345DumpBlock.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222044...

CVE-2018-8904

CVE-2018-8904 affects Windows Master (Windows Optimization Master) version 7.99.13.604 via the WoptiHWDetect.SYS driver. The vulnerability stems from lack of input value validation for IOCTL 0xf1002000, allowing a local user to cause a denial of service (BSOD) and potentially other unspecified im...

CVE-2018-8894

In 2345 Security Guard 3.6, the driver file 2345BdPcSafe.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222108...

CVE-2018-8896

CVE-2018-8896 affects 2345 Security Guard 3.6: the kernel driver 2345DumpBlock.sys does not validate input from IOCTL 0x00222044, enabling a local user to cause a denial of service (BSOD) or potentially other impact. CVSSv3 base score is 7.8 (HIGH) with local access, low attack complexity, and hi...

Linux Kernel < 4.15.4 - 'show_floppy' KASLR Address Leak

include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set up the command rawcmd.cmdrawcmd.cmdcount++ = 0x07;...

Linux Kernel < 4.15.4 - show_floppy KASLR Address Leak Exploit

Exploit for linux platform in category local exploits include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07353)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345DumpBlock.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222044. A local...

Linux Kernel 4.15.4 - show_floppy KASLR Address Leak

Linux Kernel 4.15.4 - showfloppy KASLR Address Leak include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set u...

CVE-2018-8875

In 2345 Security Guard 3.6, the driver file 2345Wrath.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x0022209c...

Input validation

In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

CVE-2018-8873

In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...

Input validation

In 2345 Security Guard 3.6, the driver file 2345Wrath.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x0022209c...

CVE-2018-8876

In 2345 Security Guard 3.6, the driver file 2345Wrath.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222098...

CVE-2018-8873

CVE-2018-8873 involves the 2345 Security Guard driver. Affected component: driver file 2345NetFirewall.sys (on version 3.6; referenced 3.7 in later records). Root cause: failure to validate input values for IOCTL 0x00222040, enabling local users to trigger a denial of service (BSOD) and possibly ...

CVE-2018-8874

In 2345 Security Guard 3.6, the driver file 2345Wrath.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222054...

Huawei Mate 7 - (/dev/hifi_misc) Privilege Escalation Exploit

Exploit for hardware platform in category local exploits / HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void...

CVE-2014-2884

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...