30 matches found
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
dns-zone-transfer-test
DNSゾーン転送テスト ドメインネームシステム（DNS）ゾーン転送テストを自動化します。 指定されたドメインのネームサーバーを自動的に検出し、ゾーン転送のテストを実行します。成功した場合、特定されたAレコードが標準出力に表示されます。 使用方法 root@kitploit: dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1 zonetransfer.me 要件 root@kitploit: git = 2.36.0 python = 3.9 pip = 20.3.4 システムインストールなしでの使用...
NewPowerDNS
NewPowerDNS NewPowerDNS 是 @domchell 的 PowerDNS 的更新版本。新增的主要功能是支持使用 DNS A 记录传输文件。以下是所做修改的完整列表： 支持通过 DNS A 记录传输 Gzip 压缩以减小文件传输体积 支持传输所有类型的文件 新的 stager，可轻松混淆或逐行运行，以绕过 AV/EDR 的拦截 可选择打印、执行或保存传输的文件 从 python2 更新到 python3 除 python3 外，唯一的依赖项是 scapy。可通过 pip 轻松安装，如下所示： root@kitploit: python3 -m pip install...
Astra Linux – Vulnerability in connman
ConnMan also known as Connection Manager versions 1.30 to 1.39 have a stack-based buffer overflow issue in the uncompress function of dnsproxy.c, occurring due to the use of NAME, RDATA, or RDLENGTH fields for the A or AAAA records...
PT-2026-73400
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
nodejs: Node.js: Denial of Service via DNS responses with excessive A records
A denial of service DoS vulnerability in Node.js allows a remote attacker to crash the application. By sending a specially crafted DNS response with an excessive number of 'A' records, an attacker can cause the dns.resolveAny function to unexpectedly abort the process...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
Affected software: Node.js 22.x, 24.x, and 26.x. Vulnerability: dns.resolveAny() can cause the Node.js process to abort when a DNS response contains more than 256 A records. Repeated triggering may lead to a denial of service. Root cause/impact: The flaw in dns.resolveAny() leads to process termi...
EUVD-2026-52553
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
nodejs: Node.js: Denial of Service via DNS responses with excessive A records
A denial of service DoS vulnerability in Node.js allows a remote attacker to crash the application. By sending a specially crafted DNS response with an excessive number of 'A' records, an attacker can cause the dns.resolveAny function to unexpectedly abort the process...
CVE-2026-50248
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint. A malicious actor that can spoof the hostname's A/AAAA record no valid RRSIG required becomes the zone'...
Node.js: dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records
A flaw in Node.js was discovered where the dns.resolveAny function aborted the Node.js process when a DNS response contained more than 256 A records...
EUVD-2021-20507
Malware in sbrugna...
EUVD-2008-3162
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-1043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames. CVE-2018-1043 Note that Nessus relies on the presence of the...
