CVE-2022-24824 Anonymous user cache poisoning in discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...

CVE-2022-24824

CVE-2022-24824 affects the Discourse platform. An attacker can poison the cache for anonymous users, causing them to see the crawler view instead of the HTML page, resulting in a partial denial-of-service. Technical details in connected sources confirm the vulnerability is in the cache handling f...

CVE-2022-24824 Anonymous user cache poisoning in discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...

CVE-2022-24824 Anonymous user cache poisoning in discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issu...

PT-2022-16903 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta and tests-passed versions Description: The issue affects Discourse, an open source platform for community discussion. An attacker can poison the cache for anonymous users, causing them to se...

CLSA-2022-1649331579 Fix of CVE: CVE-2021-25220

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

Fix of CVE: CVE-2021-25220

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

CLSA-2022-1649331387 Fixed CVE-2021-25220 in bind

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

CLSA-2022-1649172145 Fix of CVE: CVE-2021-25220

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

CLSA-2022-1649172068 Fix of CVE: CVE-2021-25220

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

CLSA-2022-1649170483 Fix CVE(s): CVE-2021-25220

SECURITY UPDATE: cache poisoning via bogus NS records - debian/patches/CVE-2021-25220.patch: tighten rules for acceptance of records into the cache in lib/dns/resolver.c. - CVE-2021-25220...

DNS forwarders - cache poisoning vulnerability

...

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

Design/Logic Flaw

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

CVE-2021-43105

Technitium DNS Server vulnerabilities: A bailiwick checking function flaw in versions ≤ 7.0 allows malicious users to inject NS records of any domain (even TLDs) into the cache, enabling DNS cache poisoning. The PT-2022-11786 entry and CNNVD/CVE references corroborate this, stating the impact as ...

Node.js: HTTP Request Smuggling Due to Flawed Parsing of Transfer-Encoding

Summary: The llhttp parser in the http module in Node v17.8.0 does not correctly parse and validate Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS. Description: After 1501679, I did a bit more digging into the issue, and found that there were more flaws in the parsing of...

PT-2022-11786 · Technitium · Technitium Dns Server

Name of the Vulnerable Software and Affected Versions: Technitium DNS Server versions = 7.0 Description: A vulnerability in the bailiwick checking function exists that allows specific malicious users to inject NS records of any domain into the cache and conduct a DNS cache poisoning attack...

Technitium DNS Server 安全漏洞

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in Technitium DNS Server version 7.0 and earlier versions, which stems from a flaw in the...