TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

Realtek SDK miniigd Command Injection

Realtek SDK miniigd contains an unauthenticated OS command injection vulnerability in UPnP WANIPConnection AddPortMapping handling. The proof of concept submits a controlled NewInternalClient value. https://packetstorm.news/download/238692...

Exploit for CVE-2014-8361

CVE-2014-8361 — Realtek SDK miniigdSOAP: RCE через UPnP Лабор...

cve-2021-35394-ecosystem

CVE-2021-35394 Ecosystem This repo exists because one exploit happens to make these botnets visible to a passive sensor — not because they're related to each other. CVE-2021-35394 Realtek SDK command injection, UDP/9034 is the entry criterion : a family is in scope because it was observed...

TOTOLINK/Realtek Routers - Information Disclosure Detection

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

EUVD-2019-9423

Malware in sbrugna...

EUVD-2023-55135

Malicious code in bioql PyPI...

EUVD-2022-31085

Malicious code in bioql PyPI...

EUVD-2023-51951

Malicious code in bioql PyPI...

EUVD-2023-49522

Malicious code in bioql PyPI...

EUVD-2022-31086

Malicious code in bioql PyPI...

EUVD-2022-31084

Malicious code in bioql PyPI...

CVE-2025-44526

Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy BLE data packets. This issue allows attackers to cause a Denial of Service DoS via a crafted LLLengthReq packet...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

PT-2025-27243 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue in the Bluetooth Low Energy BLE stack allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-44559

The Realtek RTL8762E BLE SDK v1.4.0 is vulnerable to a Denial of Service (DoS) attack due to a flaw in its Bluetooth Low Energy (BLE) stack. The root cause is identified as improper cleaning or release of resources (CWE-400), which allows an attacker within Bluetooth range to trigger a service fa...

PT-2025-28940 · Realtek · Rtl8762E Sdk +1

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762EKF-EVB RTL8762E SDK version 1.4.0 Description: The Realtek RTL8762EKF-EVB RTL8762E SDK does not perform adequate permission checks on critical fields within Bluetooth Low Energy BLE data packets. This allows attackers to cause...

CVE-2025-44531

An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service DoS via sending a crafted before a pairing public key is received during a Bluetooth connection attempt...

CVE-2025-44531

An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service DoS via sending a crafted before a pairing public key is received during a Bluetooth connection attempt...