Lucene search
+L

1344 matches found

Kitploit
Kitploit
added 2026/09/12 12:53 a.m.5 views

Ares

Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:54 a.m.9 views

Ares

Project Ares Project Ares Injector Project Ares Injector is a Proof of Concept PoC loader written in C/C++ based on the Transacted Hollowing technique. The loader injects a PE into a remote process and features: PPID spoofing CIG to block non-Microsoft-signed binaries Dynamic function resolution...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 2:23 a.m.8 views

CVE-2020-8277

CVE-2020-8277 For educational purposes only. Quick Run root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version I...

7.5CVSS7.1AI score0.54164EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/09/05 8:25 a.m.8 views

c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

...

7.5CVSS5.8AI score0.00452EPSS
SaveExploits0
OSV
OSV
added 2026/09/03 7:17 p.m.4 views

AZL-99093 CVE-2026-33630 affecting package fluent-bit 3.1.10-6

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.3AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/03 7:17 p.m.3 views

AZL-99095 CVE-2026-33630 affecting package nodejs 24.18.1-1

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.3AI score0.00452EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 7:17 p.m.7 views

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS0.00452EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/03 6:42 p.m.9 views

EUVD-2026-70664

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 6:42 p.m.104 views

CVE-2026-33630

c-ares , an asynchronous DNS resolver library, is affected by a use-after-free / double-free in its query-completion handling, present from version 1.32.3 through 1.34.6 and fixed in 1.34.7 . The flaw occurs when a query's callback is invoked while the query is still linked in the channel's inter...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/03 6:42 p.m.38 views

CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS0.00452EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2026/09/03 6:42 p.m.17 views

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/03 6:42 p.m.13 views

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.3AI score0.00452EPSS
SaveExploits0
OSV
OSV
added 2026/09/03 6:42 p.m.7 views

CVE-2026-33630 c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

7.5CVSS5.5AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.9 views

openSUSE 16 Security Update : c-ares (openSUSE-SU-2026:21721-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21721-1 advisory. Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via aresgetaddrinfo over...

7.5CVSS7.1AI score0.00452EPSS
SaveExploits0References9
OPENSUSE Linux
OPENSUSE Linux
added 2026/09/02 12:00 a.m.7 views

Security update for c-ares (important)

openSUSE security update: security update for c-ares ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21721-1 Rating: important References: bsc1270416 bsc1276290 bsc1276291 Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores:...

8.7CVSS7AI score0.00452EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/01 3:48 p.m.4 views

OPENSUSE-SU-2026:21721-1 Security update for c-ares

This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via aresgetaddrinfo over TCP bsc1270416. - CVE-2026-69184: CPU exhaustion denial of service via unbounded DNS name compression...

7.5CVSS7.1AI score0.00452EPSS
SaveExploits0References6
Oracle linux
Oracle linux
added 2026/09/01 12:00 a.m.6 views

nodejs22 security update

1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219...

8.4CVSS7.1AI score0.005EPSS
SaveExploits1
Mageia
Mageia
added 2026/08/31 4:22 p.m.7 views

Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

7.5CVSS7.1AI score0.00452EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/31 4:22 p.m.7 views

MGASA-2026-0343 Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

7.5CVSS7.1AI score0.00452EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/25 8:27 a.m.6 views

ROOT-OS-DEBIAN-12-CVE-2024-25629 CVE-2024-25629 in c-ares - Patched by Root

Root has patched CVE-2024-25629 in the c-ares package for Root:Debian:12. Multiple fixed versions available...

5.5CVSS6.3AI score0.00352EPSS
SaveExploits0
Rows per page
Query Builder