reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit SDK to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinar...

rtl8812au

RTL8812AU/21AU 및 RTL8814AU 리눅스 드라이버 모니터 모드 및 프레임 인젝션 지원 마스터 브랜치는 https://github.com/ulli-kroll/rtl8821au 브랜치 v4.3.22-beta/rework를 기반으로 합니다. rtwversion.c에 따르면 실제 드라이버 버전은 4.3.20입니다. 브랜치 v4.3.21은 RTL8814AU 또는 RTL8812AU/RTL8821AU 칩셋용으로 빌드할 수 있습니다. RTL8812AU/RTL8821AU 드라이버를 빌드하려면 다음을 입력하세요: $ make...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG 버퍼 오버플로우 이 저장소는 DEFCON30에서 발표된 "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS." 세션의 자료를 포함하고 있습니다. 이 저장소의 내용은 다음과 같습니다: analysis: CVE-2022-27255 존재 여부를 탐지하는 자동화된 펌웨어 분...

TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

RealTek Jungle SDK - Arbitrary Command Injection

There is a command injection vulnerability on the "formWsc" page of the management interface. Successful exploitation of this vulnerability could lead to remote code execution and compromise of the affected system. id: CVE-2021-35395 info: name: RealTek Jungle SDK - Arbitrary Command Injection...

CVE-2026-51585

realtek poc rt26cx21x64.sys 익스플로잇 Realtek PCIe GbE/2.5GbE/5GbE 계열 개요 OID 0xFF816871은 NIC의 mmio BAR를 호출 프로세스의 가상 주소 공간에 매핑합니다. MmLockedPagesSpecifyCache, \.\RealTekCardGUID를 통해 UM에서 접근 가능 이 IOCTL0x0012C818은 레지스트리 값DrvMode=4에 의해 게이트됩니다. mmio 레지스터 접근 권한을 얻으면, 루프백 모드에서 NIC의 tx/rx 디스크립터 링을 프로그래밍하여 임의의...

CVE-2021-32537

CVE-2021-32537: RTKVHD64의 범위를 벗어난 접근으로 인한 풀 손상 이 버그는 2021년 4월 초 Realtek에 제보한 내용입니다. 영향을 받는 드라이버는 RTKVHD64.sys이며, 다양한 주류 하드웨어에서 사용 가능한 것으로 보입니다 아래 하드웨어 구성에서 테스트했지만 더 많은 장치가 취약할 수 있습니다: Microsoft Surface Laptop, Microsoft Surface Book, Microsoft Surface Pro, Lenovo Thinkpad, Dell XPS 13. Realtek으로부...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - 디버그 ioctl을 통한 인증되지 않은 커널 메모리 읽기/쓰기 CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 발견자 : Daniil Gordeev 공개일 : 2026-05-03 요약 Realtek rtl819x out-of-tree "Jungle SDK"의 rtl8192cd Wi-Fi 커널 드라이버는 액세스 제어 검사 없이 writemem0x89F5 및 readmem0x89F6이라는 두 개의 IOCT...

lg-webos-kexec

lg-webos-kexec kexec를 통해 루팅된 LG webOS TV에서 커스텀 Linux 커널 부팅 — RAM에서 실행, secure-boot 우회 없음. 상태: 작업 진행 중. 커스텀 커널을 스테이징하여 userspace에 도달할 수 있지만, 아직 사용 가능한 OS로 유지되지는 않습니다. 대상 LG 50UP81009LR webOS 6.5, Realtek RTD2875, armv7l. Homebrew Channel로 루팅됨; 스톡 서명 커널 + webOS userspace는 그대로 유지됩니다. 입증된 것 실기기 검증 완료...

CVE-2026-97500

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. The driver fails to validate the length of physical layer PHY status information elements before parsing received data. A malicious or malfunctioning wireless device could exploit this flaw by providing status data with an...

CVE-2026-97907

A flaw was found in the Linux kernel's Realtek Bluetooth driver. When processing firmware images on hardware where the chip key identifier is zero, the driver incorrectly manages loop control and evaluates an uninitialized or stale return code. A local user capable of providing firmware or...

cve-2021-35394-ecosystem

CVE-2021-35394 Ecosystem This repo exists because one exploit happens to make these botnets visible to a passive sensor — not because they're related to each other. CVE-2021-35394 Realtek SDK command injection, UDP/9034 is the entry criterion : a family is in scope because it was observed...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192u: Fixed a deadlock in ieee80211beaconsstop. There is a deadlock in ieee80211beaconsstop, as shown below: Thread 1 | Thread 2 | ieee80211sendbeacon ieee80211beaconsstop | modtimer spinlockirqsave //1 | Wa...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: mmc: rtsxusbsdmmc: Fix the return value check in mmcaddhost. The mmcaddhost function may return an error. If we ignore its return value, the memory allocated by mmcallochost will be leaked, leading to a kernel crash due to the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: In rtl8xxxu, memory leaks were fixed in devices like RTL8723BU and RTL8192EU. The RTL8723BU Wi-Fi + Bluetooth combo chip may leak memory when it is connected to a Bluetooth audio device. The busy Bluetooth traffic...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: rtw88: Fixed an array overflow in rtwgettxpowerparams When using the kernel with the Undefined Behaviour Sanity Checker UBSAN enabled, the following array overflow was logged:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check whether the card is instantiated before proceeding with the jack detection. However, rt700, rt711, and rt711-sdca lack a check on the card...