15 matches found
CVE-2026-35393
goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3...
CVE-2026-35393
goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3...
CVE-2021-35393
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due ...
CVE-2023-35393
Azure Apache Hive Spoofing Vulnerability...
CVE-2023-35393 Azure Apache Hive Spoofing Vulnerability
...
CVE-2023-35393 Azure Apache Hive Spoofing Vulnerability
...
CVE-2023-35393
CVE-2023-35393 corresponds to a spoofing vulnerability in Azure Apache Hive affecting Azure HDInsight/Hive components. The NCSC advisory summarizes the impact as "Pretend to be another user" and recommends installing the updates from Microsoft MSRC/MS-Update guidance. The available sources label ...
KLA51716 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure Apache...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially gaining access gain access to sensitive data in the victim's context, or execute code with the victim's privileges. Successful exploitation...
CVE-2022-35393
CVE-2022-35393 entry is rejected/not used.
Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)
A buffer overflow vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...
Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices
Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits SDKs accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK...
CVE-2021-35393
creationtimestamp| type| source ---|---|--- 2021-08-16 16:14:34+00:00| seen| https://t.me/cibsecurity/27374 2021-08-17 19:18:26+00:00| seen| https://t.me/NeKaspersky/1142 2021-08-18 16:31:58+00:00| seen| https://t.me/sysodmins/12727 2021-09-01 11:53:46+00:00| published-proof-of-concept|...
CVE-2021-35393
Concrete details exist for Realtek Jungle SDK vulnerabilities (CVE-2021-35392, -35393, -35394, -35395). Realtek Jungle SDK v2.x–v3.4.14B runs a WiFi Simple Config/UPnP/SSDP server (named wscd or mini_upnpd) and separate management interfaces. Root causes include unsafe handling of submitted param...