VirtualLockSensorLPE

VirtualLockSensorLPE Description Local privilege escalation PoC exploit for CVE-2025-0886 that targets Elliptic Virtual Lock Sensor version 3.1.60531.2 running on Windows, which is installed by default on certain Lenovo laptop models. Allows execution of a payload in the context of SYSTEM from a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: PCI: Fixed a use-after-free of slot-bus during hot removal. Dennis reported a boot crash on recent Lenovo laptops with a USB4 dock. Since the commit 0fc70886569c "thunderbolt: Reset USB4 v2 host router" and the commit...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992838 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992227 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990094 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

EUVD-2020-7583

Malware in sbrugna...

EUVD-2015-7199

Malware in sbrugna...

EUVD-2024-51866

Malicious code in bioql PyPI...

CVE-2024-53194

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo laptops with a USB4 dock. Since commit 0fc70886569c "thunderbolt: Reset USB4 v2 host router" and commit 59a54c5f3dbd "thunderbolt: Res...

CVE-2024-53194

The Linux kernel contains a use-after-free vulnerability in the PCI subsystem during hot removal. The issue occurs because pciehp creates a pci_slot and holds a pointer to the pci_bus, but fails to acquire a reference to that bus. During a race condition where the hierarchy is removed by pci_remo...

PT-2024-2542 · Lenovo · Lenovo Laptops

Name of the Vulnerable Software and Affected Versions: Lenovo laptops affected versions not specified Description: The issue is related to the implementation of System Management Mode SMM in Lenovo laptop firmware, which is associated with insufficient input validation. This could allow an attack...

RTKVHD64.sys DoS

The vulnerability of the RTKVHD64.sys driver in the Realtek High-Definition Audio HDA sound driver package for Lenovo laptops is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures...

PT-2022-4873 · Quectel · Quectel Em05-Ce

Name of the Vulnerable Software and Affected Versions: Quectel EM05-CE wireless network adapter versions affected versions not specified Description: The issue is related to the microprogram software of Quectel EM05-CE wireless network adapters in Lenovo laptops, which fails to neutralize special...

Smart Standby Driver DoS

The vulnerability of the Smart Standby Driver software driver for Lenovo laptops relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops

Three high-impact Unified Extensible Firmware Interface UEFI security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices. Tracked as CVE-2021-3970, CVE-2021-3971, and...

CVE-2020-15596

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file...

CVE-2020-15596

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file...

CVE-2020-15596: Uncontrolled Search Path Element

The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file...

CyberLink LabelPrint < 2.5 - Buffer Overflow (SEH Unicode) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...

Multiple Lenovo Products ElanTech Touchpad Driver Elevation of Privilege Vulnerability

Lenovo 300S-11IBR and others are laptop products from the Chinese company Lenovo.ElanTech Touchpad driver is one of the touchpad drivers. A security vulnerability exists in the ElanTech Touchpad driver in several Lenovo products. The vulnerability can be exploited by an attacker to execute code...