CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - 디버그 ioctl을 통한 인증되지 않은 커널 메모리 읽기/쓰기 CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 발견자 : Daniil Gordeev 공개일 : 2026-05-03 요약 Realtek rtl819x out-of-tree "Jungle SDK"의 rtl8192cd Wi-Fi 커널 드라이버는 액세스 제어 검사 없이 writemem0x89F5 및 readmem0x89F6이라는 두 개의 IOCT...

CVE-2023-50382

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-50383

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

EUVD-2024-19392

Malicious code in bioql PyPI...

EUVD-2023-55181

Malicious code in bioql PyPI...

EUVD-2023-53546

Malicious code in bioql PyPI...

EUVD-2023-50031

Malicious code in bioql PyPI...

EUVD-2023-55062

Malicious code in bioql PyPI...

EUVD-2023-53773

Malicious code in bioql PyPI...

EUVD-2023-55059

Malicious code in bioql PyPI...

EUVD-2023-53093

Malicious code in bioql PyPI...

EUVD-2023-55060

Malicious code in bioql PyPI...

EUVD-2023-45768

Malicious code in bioql PyPI...

EUVD-2023-38511

Malicious code in bioql PyPI...

EUVD-2023-55179

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2023-50381

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2023-41251

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2023-34435

A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-35392

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe...