BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium ISC has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS DoH. A sender with no credentials can crash the...

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

PoC de Envenenamiento de Caché de BIND 9 - CVE-2025-40778 Resumen Conceptual Esta vulnerabilidad permite a un atacante corromper la caché DNS de un Resolver BIND, obligando a los usuarios legítimos a ser redirigidos a direcciones IP maliciosas sin su conocimiento. La lógica central del ataque: El...

CVE-2025-9074

CVE-2025-9074 – Escape total de Docker en Docker Desktop para Windows y macOS 📌 Descripción Docker Desktop expone la API interna del motor de Docker en http://192.168.65.7:2375 a cualquier contenedor en ejecución — sin autenticación ni control de acceso. Dado que el motor puede montar el sistema ...

CVE-2024-27348

🔥 CVE-2024-27348 Exploitation Toolkit 🎓 Academic Project 📚 Course: FC411 - Secure Network Design 👨‍🏫 Instructor: Dr. Maira Sultan 🏫 University: University of Prince Mugrin 📅 Year: 2025 ⚡ A complete toolkit for exploiting CVE-2024-27348 Apache Huge-Graph-Server developed as part of the FC411 course...

copy-fail-mitigation-with-bpftrace

Copy Fail 修复利用eBPF，一行代码搞定 CVE-2026-31431，又名 Copy Fail，可以通过 bpftrace 命令，用一行代码进行修复，无需编译 kpatch，无需 cargo 编译 English Version|中文版本 思路 要利用该漏洞，需要绑定到AFALG 接口，并且使用加密算法authencesn ，而这是绝大多数程序都不会用到的。这也就是修复代码可以发挥作用的地方。 文件列表 ├── kfunc.sh ├── kprobe.sh ├── tests │ └── bindafalg.py └── tracepoint.sh 为什么要这么多文件...

badblood

Bad Blood Bad Blood es un exploit para CVE-2021-20038, un desbordamiento de búfer basado en pila en el binario httpd de los sistemas de la serie SMA-100 que utilizan versiones de firmware 10.2.1.x. He escrito muchos de los detalles técnicos aquí: AttackerKB CVE-2021-20038 El exploit, tal como est...

Pwnkit-go

PwnKit-go-LPE CVE-2021-4034 Un exploit basado en golang para CVE-2021-4034, apodado pwnkit root@kitploit: @@@@@@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@ @@@ @@@ @@@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@@ @@@@@@@@ @@! @@@ @@! @@! @@! @@!@!@@@ @@! !@@ @@! @@! !@@ @@! @@@ !...

docker-socket-risk-demos

docker-socket-risk-demos Repositorio complementario para el vídeo: Deja de montar docker.sock — Ejecuta Trivy sin ceder acceso root — inspirado en CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI Este repositorio contiene la aplicación web de ejemplo y el prompt de Claude Code utilizado...

UBUNTU-CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records,...

UBUNTU-CVE-2026-76163

If BIND is loaded with a "named.conf" file that contains no global "...

F5 Networks BIG-IP : BIND vulnerability (K000163335)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163335 advisory. A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from...

UBUNTU-CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zon...

UBUNTU-CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumptio...

UBUNTU-CVE-2026-81563

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin...

CVE-2026-19941

A flaw was found in BIND 9. A remote attacker could exploit this by providing an inapplicable NSEC Next Secure record to a named resolver. This could allow the attacker to mask the existence of a victim's wildcard DNS Domain Name System record, potentially leading to a misrepresentation of DNS...

CVE-2026-77119

A flaw was found in BIND 9. A remote attacker could exploit a vulnerability where a validly signed NSEC3 record from an unrelated DNS zone might be accepted as proof of insecurity. This could downgrade a secure delegation, allowing forged unsigned DNS answers to be accepted by the resolver,...

CVE-2026-19662

A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...

hacktivity-vulns-exploits-lab

Vulnerabilidades, Exploits y Payloads de Acceso Remoto — informe de laboratorio Mi recorrido y análisis de la hoja de Hacktivity Cyber Security Labs "Vulnerabilities, Exploits, and Remote Access Payloads" curso de Ethical Hacking y Penetration Testing, Leeds Beckett University. Cubre cómo las...

bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records

A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...

bind: BIND: DNS cache poisoning via malformed zone insertion

A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker could exploit this by introducing a specially crafted, malformed DNS zone into an authoritative BIND server. This action could cause the server to incorrectly delegate authority for parts of its own...