Malicious code in rtk-log (npm)

The package rtk-log was found to contain malicious code...

Malicious code in rtk-service (npm)

The package rtk-service was found to contain malicious code...

MAL-2025-42072 Malicious code in rtk-log (npm)

The package rtk-log was found to contain malicious code...

MAL-2025-42074 Malicious code in rtk-service (npm)

The package rtk-service was found to contain malicious code...

MAL-2025-42073 Malicious code in rtk-logger (npm)

The package rtk-logger was found to contain malicious code...

Malicious Package

Overview rtk-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Vulnerabilities of functions rtk_usb3phy_probe() and devm_kzalloc() in the Linux operating system, allowing attackers to cause service failures

The vulnerabilities of the rtkusb3phyprobe and devmkzalloc functions in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

SUSE CVE-2024-53205

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb2phyprobe In rtkusb2phyprobe devmkzalloc may return NULL but this returned value is not checked...

AZL-55469 CVE-2024-53204 affecting package kernel for versions less than 6.6.85.1-1

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb3phyprobe In rtkusb3phyprobe devmkzalloc may return NULL but this returned value is not checked...

DEBIAN-CVE-2024-53205

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb2phyprobe In rtkusb2phyprobe devmkzalloc may return NULL but this returned value is not checked...

UBUNTU-CVE-2024-53205

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb2phyprobe In rtkusb2phyprobe devmkzalloc may return NULL but this returned value is not checked...

CVE-2022-24024

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2019-19823

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

CVE-2019-19823

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

Code injection

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 allows remote attackers to retrieve the configuration, including sensitive data usernames and passwords. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R...

Unfixed XSS vulnerability at www.dr.dk

Security researcher RTK, has submitted on 11/06/2010 a cross-site-scripting XSS vulnerability affecting www.dr.dk, which at the time of submission ranked 3212 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. ...

Unfixed XSS vulnerability at musik.tdconline.dk

Security researcher RTK, has submitted on 11/06/2010 a cross-site-scripting XSS vulnerability affecting musik.tdconline.dk, which at the time of submission ranked 40360 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/10/2010. It is currently...