CVE-2026-35392

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3...

CVE-2026-35392

creationtimestamp| type| source ---|---|--- 2026-04-02 10:58:39+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-g8mv-vp7j-qp64 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M 2026-04-06 23:36:59+00:00| seen...

MAL-2025-35392 Malicious code in test-mlw2-gappy-slows (npm)

The package test-mlw2-gappy-slows was found to contain malicious code...

CVE-2023-35392

creationtimestamp| type| source ---|---|--- 2023-07-21 22:23:41+00:00| seen| https://t.me/cibsecurity/67107...

CVE-2023-35392

CVE-2023-35392 affects Microsoft Edge (Chromium-based). The vulnerability stems from errors in presenting information in the browser’s UI, enabling a remote spoofing attack that requires user interaction. According to available documents, exploitation is possible over network with user interactio...

CVE-2023-35392 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2023-35392 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

KLA51267 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Web API Permission...

Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...

CVE-2022-35392

CVE-2022-35392 is rejected and not used as an active vulnerability entry.

Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)

A buffer overflow vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits SDKs accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK...

CVE-2021-35392

creationtimestamp| type| source ---|---|--- 2021-08-16 16:14:33+00:00| seen| https://t.me/cibsecurity/27373 2021-08-17 13:53:10+00:00| seen| https://t.me/truesecator/2009 2021-08-17 14:52:32+00:00| seen| https://t.me/SecLabNews/10703 2021-08-17 19:18:26+00:00| seen| https://t.me/NeKaspersky/1142...

CVE-2021-35392

Realtek Jungle SDK (Realtek RTL819xD-based devices) exposes a vulnerable WiFi Simple Config server (Go-Ahead/Boa HTTP web server variants) that implements UPnP/SSDP. CVE-2021-35392 describes a heap overflow in handling SSDP NOTIFY messages crafted from M-SEARCH ST headers, affecting Realtek Jungl...