164 matches found
PT-2020-13592 · Nzxt · Winring0X64 Driver +1
Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality. This allows an adversary to obtain elevated privileges by sending a specially crafted I/O request packet IRP. An...
PT-2020-13596 · Nzxt · Winring0X64 Driver +1
Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver IRP 0x9c402088 functionality. This can be triggered by a specially crafted I/O request packet IRP, allowing an attacker to send a malicious IRP...
PT-2020-13589 · Nzxt · Nzxt Cam
Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0d8 giv...
CVE-2020-13518
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
PT-2020-13594 · Nzxt · Nzxt Cam
Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: An information disclosure issue exists in the WinRing0x64 Driver IRP 0x9c406104 functionality. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can...
PT-2020-13593 · Nzxt · Nzxt Cam
Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: An information disclosure issue exists in the WinRing0x64 Driver IRP 0x9c406144 functionality. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can...
NZXT CAM 权限许可和访问控制问题漏洞
NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM 4.8.0 suffers from a Privilege Permission and Access Control Issues...
NZXT CAM WinRing0x64 Driver IRP 0x9c406104 information disclosure vulnerability
Summary An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Tested...
NZXT CAM WinRing0x64 driver IRP 0x9c406144 information disclosure vulnerability
Summary An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Tested...
CVE-2020-13523
An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
UBUNTU-CVE-2020-11089
In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...
Security Advisory 2020-02-21-1 - ppp buffer overflow vulnerability (CVE-2020-8597)
DESCRIPTION A remotely exploitable vulnerability was found in Point-to-Point Protocol Daemon pppd, which has a significant potential impact due to the possibility of remote code execution prior to authentication. OpenWrt by default enables the FORTIFYSOURCE=1 compiler macro which introduces...
SUSE SLES11 Security Update : libssh2_org (SUSE-SU-2019:13982-1)
This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...
AIX bind Advisory : bind_advisory16.asc (IV98826) (IV98827)
The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A security bypass exists in the way BIND handles TSIG authentication for dynamic updates. A remote, unauthenticated attacker can exploit this, via a specially crafted request packet containing a...
joomla create a privileged user exploit analysis(cve-2016-8869)-vulnerability warning-the black bar safety net
Vulnerability environment Joomla version 3. 44 to 3. 63 Vulnerability description This vulnerability and CVE-2016-8869 is a companion piece to the vulnerability, but this vulnerability than 8869 this vulnerability, the ideas more ingenious, more interesting. This vulnerability nature is also...
Microsoft Windows Local Security Privilege Subsystem Service Denial of Service Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A denial of service vulnerability exists in the Microsoft Windows Local Security Privilege Subsystem service. A remote attacker exploiting the vulnerability could cause a denial of service attack via a...
Scientific Linux Security Update : bind on SL5.x, SL6.x, SL7.x i386/x86_64 (20160928)
Security Fixes : - A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. CVE-2016-2776 %NASLMINLEVE...
CVE-2009-0282
Integer overflow in Ralink Technology USB wireless adapter RT73 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Probe Request packet with a long SSID,...
CVE-2014-0791
Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...
