24114 matches found
CVE-2026-77505
CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-72948
CVE-2026-72948 is a local privilege escalation vulnerability in Windows DNS caused by a relative path traversal . An authorized attacker (high privileges required) can exploit it locally with low complexity and no user interaction, achieving full compromise of confidentiality, integrity, and avai...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
EUVD-2026-73069
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
EUVD-2026-73036
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-69631
CVE-2026-69631 is an integer overflow or wraparound vulnerability in Windows DNS that allows an unauthenticated remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a network-based attack with...
EUVD-2026-73001
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-69551
Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...
CVE-2026-69310
CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....
EUVD-2026-73220
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73172
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69782
Windows DNS Server is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an unauthorized attacker to achieve remote code execution over the network with no privileges required , though the attack complexity is rated ...
CVE-2026-70091
CVE-2026-70091 is a race condition in Windows DNS caused by concurrent execution using a shared resource with improper synchronization. An unauthorized, network-based attacker can exploit this to cause a denial of service . The vulnerability is rated CVSS 5.9 (MEDIUM) with a network attack vector...
EUVD-2026-73171
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...
DNS-Poisoning-Triage-Lab
DNS and ARP Traffic Triage Lab An educational packet-analysis and resolver-hardening exercise completed on an Arch Linux workstation. Scope: This repository is a learning project. The included capture is useful for practicing DNS and ARP inspection, but it does not by itself prove a live...
siphondns
SiphonDNS A PoC for techniques described in this research. Implements data exfiltration via non-standard sections of DNS. Server: root@kitploit: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving...
RedTeamScripts
RedTeamScripts Repository with various Red Team scripts. kill.exe Performing all kind of activities during a red team and you have several process running that you don't want to close manually. kill.exe is for you. copy it in C:\Windows\ and simply call it with the process name you want to kill...
