313 matches found
Razer Synapse 代码问题漏洞
Razer Synapse is an application from Razer, Inc. designed to configure and customize Razer's line of hardware. A security vulnerability exists in versions prior to Razer Synapse 3.7.0830.081906 that stems from its insecure installation path, improper privilege management, and improper certificate...
Razer Synapse 3.7.0731.072516 Local Privilege Escalation
Advisory ID: SYSS-2022-047 Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions before 3.7.0830.081906 Tested Versions: 3.7.0731.072516 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-08-02...
CVE-2022-47632
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
CVE-2022-47632
CVE-2022-47632 affects Razer Synapse pre-3.7.0830.081906. The vulnerability stems from an unsafe installation path, improper privilege management, and improper certificate validation that enables DLL hijacking via a malicious DLL placed in %PROGRAMDATA%\Razer\Synapse3\Service\bin before the servi...
PT-2023-12790 · Razer +3 · Razer +3
Name of the Vulnerable Software and Affected Versions: Razer affected versions not specified EVGA affected versions not specified MSI affected versions not specified AMI affected versions not specified Description: The issue concerns multiple Time-of-Check-to-Time-of-Use TOCTOU vulnerabilities in...
Razer Sila Gaming Router Command Injection (CVE-2022-29013)
A command injection vulnerability exists in Razer Sila gaming router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Razer Synapse 安全漏洞
Razer Synapse is an application from Razer, Inc. designed to configure and customize Razer's line of hardware. A security vulnerability exists in Razer Synapse. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
Malicious code in razer-xdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5597 Malicious code in razer-xdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview razer-xdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2022-29014
A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...
CVE-2022-29014
A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...
CVE-2022-29014
A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...
CVE-2022-29013
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2022-29013
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2022-29013
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...
Remote file inclusion
A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...
Command injection
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2022-29014
Razer Sila Gaming Router 2.0.441_api-2.0.418 is vulnerable to Local File Inclusion, enabling an attacker to read arbitrary files on the device. The entry points and exact vulnerable component are documented in the Nuclei template for CVE-2022-29014, with the root cause described as LFI in the aff...
