dnspooq

dnspooq DNSpooq PoC - avvelenamento della cache dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Solo per scopi educativi Requisiti Docker compose Docker Exploit Avvia i contenitori root@kitploit: $ docker-compose up -d Esegui exploit.py root@kitploit: $ docker-compose exec attacker bash...

bof-dnsmasq-cve-2017-14493

bof-dnsmasq-cve-2017-14493...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution durch Newline-Injection TL;DR Eine Remote Code Execution -Schwachstelle in der FTLDNS-Engine von Pi-hole Versionen 6.0 bis 6.5 ermöglicht es einem authentifizierten Angreifer, beliebige dnsmasq-Konfigurationsdirektiven zu injizieren, indem...

access-point

Punto di Accesso Falso AP Wi‑Fi aperto falso per la cattura del traffico in ambienti controllati. Usa hostapd modalità AP nl80211 nativa + dnsmasq DHCP/DNS + iptables NAT verso un'interfaccia uplink. Requisiti Linux, root. Scheda wireless con supporto modalità AP iw phy → Supported interface mode...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

Netgear_Pwn2Own2021

Netgear R6700v3 WAN RCE - Pwn2Own 2021 Questo è il codice utilizzato durante il Pwn2Own 2021 per ottenere una shell remota sul Netgear R6700v3. Post del blog: https://synacktiv.com/publications/pwn2own-austin-2021-defeating-the-netgear-r6700v3 Requisiti python3 con flask dnsmasq Utilizzo 1. Esegu...

CVE20265172poc

CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses su record di risorsa appositamente costruito PoC Topologia: leggi qui https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Passaggi 1. vi /etc/dnsmasq.conf port=5353...

CVE20264893poc

Topologia: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Passi​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

dnsmasq-cve-2026

Strumento di Verifica QA dnsmasq CVE-2026 Strumento black-box automatizzato per verificare 6 vulnerabilità di dnsmasq maggio 2026. Invia pacchetti di attacco a un DUT attivo e riporta PASS/FAIL — non è necessario l'accesso al codice sorgente. Avvio rapido root@kitploit: Set DUT DNS to your laptop...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

DEBIAN-CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

UBUNTU-CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

CVE-2026-13002 Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

CVE-2026-13002

CVE-2026-13002 affects dnsmasq via a flaw in the dnssec.c parsing of NSEC/NSEC3 type bitmaps, causing an infinite loop that can stall the dnsmasq process. An attacker who controls any DNSSEC-signed zone can trigger a crafted response to hang the service, leading to denial of DNS resolution for it...

EUVD-2026-58674

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients. Mitigation Mitigation for this issue is either no...

Linux Distros Unpatched Vulnerability : CVE-2026-13002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the...

Dnsmasq: Multiple Vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Multiple vulnerabilities have been discovered in Dnsmasq. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...