A major security flaw has been discovered in Asus' DriverHub management utility that allows anyone to easily run malicious code on a system with the utility installed. Programmer "MrBruh" initially discovered the exploit, revealing DriverHub can be spoofed to run any sort of malicious content without user notice.
The flaw surrounds poorly executed security measures by the developers; the app connects to an API request on a predefined port, and will accept any URL that merely includes the handle "driverhub.asus.com". (A URL such as driverhub.asus.com.mrbruh.com will work.)
