PT-2023-17160 · Unknown · Drivergenius

Name of the Vulnerable Software and Affected Versions: DriverGenius version 9.70.0.346 Description: A vulnerability was found in the function 0x9c40a0c8/0x9c40a0dc/0x9c40a0e0/0x9c40a0d8/0x9c4060d4/0x9c402004/0x9c402088/0x9c40208c/0x9c4060d0/0x9c4060cc/0x9c4060c4/0x9c402084 in the library...

PT-2023-17162 · Unknown · Drivergenius

Name of the Vulnerable Software and Affected Versions: DriverGenius version 9.70.0.346 Description: A critical vulnerability was found in DriverGenius, affecting the function 0x9C406104/0x9C40A108 in the library mydrivers64.sys of the component IOCTL Handler. This leads to memory corruption. The...

CVE-2023-1644

A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the...

CVE-2023-1645

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The...

PT-2023-17132 · Jianming · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A problematic issue has been found in the library kvcore.sys of the component IOCTL Handler, affecting the function 0x222000. This leads to denial of service and requires local access to...

JiangMin Antivirus 缓冲区错误漏洞

JiangMin Antivirus is an antivirus program from the Chinese company JiangMin. A security vulnerability exists in JiangMin Antivirus version 16.2.2022.418, which originates from a security issue in function 0x222010 in the library kvcore.sys of the component IOCTL Handler, resulting in memory...

CVE-2023-1594

CVE-2023-1594 affects novel-plus 3.6.2, specifically the MenuService in sys/menu/list. The root cause is improper handling of the sort argument, enabling SQL injection. Exploitation is possible remotely, and public exploit information exists. Several sources (NVD, Red Hat, CNNVD, OSV, etc.) concu...

PT-2023-17103 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical vulnerability was found in the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to SQL injection. It is possible to launch the attack remotely...

PT-2023-20803 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6US W20EV4.0br v15.11.0.61068 1546 841 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetSysTime function. Recommendations: For Tenda W20E version 15.11.0.6US W20EV4.0br...

CVE-2023-1492 Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service...

CVE-2023-1486

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is...

CVE-2023-1486

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is...

Improper access control

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is...

CVE-2023-1486 Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is...

Max Secure Anti Virus Plus 安全漏洞

Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProc64.sys library of the IoControlCode Handler module and may result in a denial of service...

PT-2023-17027 · Max Secure · Max Secure Anti Virus Plus

Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A critical issue was found, affecting the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. This leads to improper access controls. The attack must b...

Filseclab Twister Antivirus 安全漏洞

Filseclab Twister Antivirus is an intelligent antivirus from Fair Filseclab. A security vulnerability exists in Filseclab Twister Antivirus version 8, which stems from an unknown code found in fildds.sys, resulting in a denial of service...

Watchdog Anti-Virus 代码问题漏洞

Watchdog Anti-Virus is an anti-virus program from Watchdog USA. A code issue vulnerability exists in Watchdog Anti-Virus version 1.4.214.0, which stems from an unknown function in the library wsdk-driver.sys in the component IoControlCode Handler, resulting in a denial of service...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

PT-2023-21018 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: A Cross-Site Request Forgery CSRF issue in the /Sys/index.html endpoint of the application allows attackers to make arbitrary configuration changes within the application. This can be exploited by attackers...