179 matches found
CVE-2026-36355
CVE-2026-36355 : Realtek rtl819x Jungle SDK - Lecture/écriture non authentifiée de la mémoire du noyau via des ioctls de débogage CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Découvreur : Daniil Gordeev Divulgation : 2026-05-03 Résumé Le pilote Wi-Fi du noyau rtl8192cd du « Jungle SDK »...
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit SDK to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinar...
Realtek rtl819x Jungle SDK 信息泄露漏洞
The Realtek RTL819x Jungle SDK is a driver for wireless local area network chips developed by Realtek Semiconductor. The SDK contains an information leakage vulnerability, which stems from the lack of access control checks in the debug handlers of the writemem and readmem functions within the...
CVE-2026-36355: Exposure of Sensitive Information to an Unauthorized Actor
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK all known versions through v3.4.14B does not perform any access control checks on the writemem ioctl 0x89F5 and readmem ioctl 0x89F6 debug handlers, which are compiled into production builds via the unconditionally defined...
CVE-2023-50243
Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...
CVE-2023-50382
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...
CVE-2023-50240
Two stack-based buffer overflow vulnerabilities exist in the boa setRadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger these...
CVE-2023-50383
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...
CVE-2023-49867
A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger this vulnerability...
CVE-2023-49073
A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability...
EUVD-2024-19392
Malicious code in bioql PyPI...
EUVD-2023-55179
Malicious code in bioql PyPI...
EUVD-2023-55181
Malicious code in bioql PyPI...
EUVD-2023-55180
Malicious code in bioql PyPI...
EUVD-2023-55060
Malicious code in bioql PyPI...
EUVD-2023-55062
Malicious code in bioql PyPI...
EUVD-2023-51775
Malicious code in bioql PyPI...
EUVD-2023-50031
Malicious code in bioql PyPI...