17 matches found
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit SDK to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinar...
Malicious code in yarn-cling (npm)
The package yarn-cling was found to contain malicious code...
Malicious code in test-mlw2-cling-rhyta (npm)
The package test-mlw2-cling-rhyta was found to contain malicious code...
MAL-2025-9086 Malicious code in @malware-test-yukes-tigon-grume-cling/test-mlw3-yukes-tigon-grume-cling (npm)
The package @malware-test-yukes-tigon-grume-cling/test-mlw3-yukes-tigon-grume-cling was found to contain malicious code...
MAL-2025-36354 Malicious code in test-mlw2-stive-cling (npm)
The package test-mlw2-stive-cling was found to contain malicious code...
MAL-2025-40335 Malicious code in yarn-cling (npm)
The package yarn-cling was found to contain malicious code...
MAL-2025-35089 Malicious code in test-mlw2-cling-rhyta (npm)
The package test-mlw2-cling-rhyta was found to contain malicious code...
Malicious code in test-mlw2-stive-cling (npm)
The package test-mlw2-stive-cling was found to contain malicious code...
CVE-2020-23622
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header...
4thline cling uPnP protocol issue can lead to denial of service
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header. As of 2022, 4thline cling is no longer supported by the maintainers...
GHSA-C438-6F6R-PG8W 4thline cling uPnP protocol issue can lead to denial of service
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header. As of 2022, 4thline cling is no longer supported by the maintainers...
CVE-2020-23622
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header...
Cross site request forgery (csrf)
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header...
CVE-2020-23622
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header...
CVE-2020-23622
The CVE-2020-23622 entry maps to CVE-2020-12695 in the connected material, affecting 4thline cling UPnP/DLNA (Java/Android) versions 2.0.0–2.1.2. The issue is a Denial of Service caused by an unchecked CALLBACK header parameter in UPnP SUBSCRIBE requests, arising from missing validation in the li...
Cling code issue vulnerabilities
cling is a UPnP/DLNA library for Java and Android. A code issue exists in 4thline cling versions 2.0.0 through 2.1.2, which is a Denial of Service vulnerability that stems from not validating the CALLBACK parameter in the header...
CVE-2020-23622: Server-Side Request Forgery (SSRF)
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header...