Linux Distros Unpatched Vulnerability : CVE-2026-19662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone...

Linux Distros Unpatched Vulnerability : CVE-2026-19667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry...

Linux Distros Unpatched Vulnerability : CVE-2026-19941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An inapplicable NSEC record may be accepted by a named resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level...

Linux Distros Unpatched Vulnerability : CVE-2026-81736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CP...

Linux Distros Unpatched Vulnerability : CVE-2026-78301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND...

Linux Distros Unpatched Vulnerability : CVE-2026-19033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG...

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...

Linux Distros Unpatched Vulnerability : CVE-2026-19666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exi...

Linux Distros Unpatched Vulnerability : CVE-2026-19668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default...

Linux Distros Unpatched Vulnerability : CVE-2026-75029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all t...

Linux Distros Unpatched Vulnerability : CVE-2026-80274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proo...

Linux Distros Unpatched Vulnerability : CVE-2026-77692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport...

Linux Distros Unpatched Vulnerability : CVE-2026-81563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal...

cve-2018-5740

CVE-2018-5740 PoC Named, que recibe la respuesta de un servidor autoritativo legítimo, se bloquea por CVE-2018-5740. ARCHIVOS named.conf: archivo de configuración de BIND para el servidor autoritativo. example.com: archivo de zona para el servidor autoritativo. named-full-resolver.conf: archivo d...

CVE-2026-76873

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

CVE-2017-3143

Exploit de omisión TSIG Exploit para CVE-2017-3143 en Bind y CVE-2017-11104 en Knot DNS. Consulte https://www.synacktiv.com/ressources/CVE-2017-3143BIND9TSIGdynamicupdatesvulnerabilitySynacktiv.pdf para más información. Autor Clément Berthaux - clement punto berthaux arroba synacktiv punto com...

EUVD-2026-78394

PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the...

CVE-2026-57140 PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the...

PT-2026-93207

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by network...

PT-2026-92078

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts read result function within the RPC gateway transport parser. Attackers can send a malicious BIND ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...