cve-2018-5740

CVE-2018-5740 概念验证 接收来自合法权威服务器响应的 Named 服务，因 CVE-2018-5740 而崩溃。 文件 named.conf: 权威服务器的 BIND 配置文件。 example.com: 权威服务器的区域文件。 named-full-resolver.conf: 受害者全解析服务器的 BIND 配置文件。 复现步骤 安装 CentOS 7.5。 安装 bind 和 bind-utils 软件包。 root@kitploit: yum install bind-9.9.4-61.el7.x8664 bind-utils-9.9.4-61.el7.x8664...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed for an integer overflow in sldnsstr2wirednamebuforigin, resulting in an out-of-bounds write. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Astra Linux – Vulnerability in unbound

Unbound before version 1.9.5 allows assertion failures and denial of service in dnamepktcopy due to an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

CVE-2026-19916

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file editfooditems.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now...

CVE-2026-19916

CVE-2026-19916 affects code-projects Online Food Order System 1.0. The vulnerability is in an unknown function within the file edit_food_items.php, where manipulating the argument dname yields cross-site scripting (XSS). Remote exploitation is possible and the exploit is public. Connected sources...

CVE-2026-19916 code-projects Online Food Order System edit_food_items.php cross site scripting

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file editfooditems.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now...

CVE-2026-19916

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file editfooditems.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now...

PT-2026-73061

Name of the Vulnerable Software and Affected Versions code-projects Online Food Order System version 1.0 Description An issue exists in the edit food items.php file where manipulating the dname argument allows for cross-site scripting XSS, a technique used to inject malicious scripts into web pag...

bind: bind9: Record ordering based unexpected exit with CNAME or DNAME

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...

SUSE-SU-2026:3452-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. - CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...

CVE-2026-52686

A flaw was found in pdns-recursor. This vulnerability allows a remote attacker to bypass DNSSEC Domain Name System Security Extensions validation. The flaw occurs because the system accepts wildcard expansion proofs NSEC/NSEC3 records without proper signature validation when the wildcard answer i...

SUSE CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

SUSE CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-52686 Wildcard CNAME proof validation bypass

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

AZL-93138 CVE-2026-12617 affecting package bind for versions less than 9.20.26-1

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

ALPINE-CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-12617

CVE-2026-12617 affects ISC BIND 9: vulnerable in 9.18.0–9.18.50 and 9.20.0–9.20.24 (including 9.18.11-S1–9.18.50-S1 and 9.20.9-S1–9.20.24-S1). The issue causes named to quit unexpectedly when handling responses for CNAME/DNAME and A records under certain query/order scenarios, potentially leading...