CLSA-2026-1767800092 python2: Fix of CVE-2025-0938

CVE-2025-0938: disallow square brackets in domain names for parsed URLs to prevent differential URL parsing...

CVE-1999-0521

An NIS domain name is easily guessable...

PT-2026-1558

Name of the Vulnerable Software and Affected Versions Microsoft Playwright MCP Server versions prior to 0.0.40 Description The software does not properly validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and se...

D-Link Router DNS Alteration

The vulnerability of the web interface of D-Link DSL-2740R, DSL-2640B, DSL-2780B, and DSL-526B routers lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability can allow a remote attacker to alter DNS settings...

EUVD-2026-0944

Multiple D-Link DSL gateway devices contain a command injection vulnerability in the dnscfg.cgi endpoint due to improper sanitization of user-supplied DNS configuration parameters. An unauthenticated remote attacker can inject and execute arbitrary shell commands, resulting in remote code...

CVE-2026-0625 D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DN...

VulnCheck KEV: CVE-2026-0625

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DN...

D-Link多款产品 访问控制错误漏洞

The D-Link DSL-2740R and other products are products of China AUO D-Link.The D-Link DSL-2740R is a high-performance ADSL router.The D-Link DSL-2640B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed...

PT-2026-29246

Name of the Vulnerable Software and Affected Versions DNSdist affected versions not specified Description An attacker can trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist instance using custom Lua code. The issue occurs when utilizing the DNSQuestion:changeName or...

PT-2026-26671

Name of the Vulnerable Software and Affected Versions GNU C library versions 2.34 through 2.43 Description The GNU C library’s gethostbyaddr and gethostbyaddr r functions, when used with a configured nsswitch.conf file specifying the library’s DNS backend, may return invalid DNS hostnames. This...

PT-2026-29247

Name of the Vulnerable Software and Affected Versions DNSdist affected versions not specified Description An attacker may be able to trigger a use-after-free condition by sending specially crafted DNS queries to DNSdist when using custom Lua code. This occurs through the DNSQuestion:getEDNSOption...

PT-2026-29243

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can trigger an out-of-bounds read by sending a crafted DNS response packet when custom Lua code utilizes the newDNSPacketOverlay function to parse DN...

PT-2026-29244

Name of the Vulnerable Software and Affected Versions versions prior to the fix for CVE-2026-24029 Description When the early acl drop or earlyACLDrop in Lua option is disabled, and a DNS over HTTPs frontend is utilizing the nghttp2 provider, the Access Control List ACL check is bypassed. This...

SUSE CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

CVE-2023-54170

CVE-2023-54170: In the Linux kernel, dns_query() can in rare cases create a duplicate index key in a keyring assoc_array when resolving a hostname. This leads to a kernel BUG_ON() and a crash. The issue occurs during keyring association and DNS resolver interaction in the kernel’s DNS resolver pa...

CVE-2023-54170 keys: Fix linking a duplicate key to a keyring's assoc_array

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

Tenda M3 安全漏洞

Tenda M3 is an access control controller from Tenda China. A security vulnerability exists in Tenda M3 version 1.0.0.13, which originates from incorrect manipulation of the parameters startip/endip/leasetime/gateway/dns1/dns2 in the file /goform/setDhcpAP, which could result in a stack buffer...

CVE-2025-69206

CVE-2025-69206 (Hemmelig) describes an SSRF filter bypass in the Secret Requests webhook URL validation prior to version 7.3.3. The isPublicUrl check blocks private IPs by hostname patterns, but can be bypassed via DNS rebinding (e.g., localtest.me) or open redirects, allowing an authenticated us...

Cola Dnslog 安全漏洞

Cola Dnslog is a no-reply vulnerability detection aid platform for individual AbelChe developers. A security vulnerability exists in Cola Dnslog v1.3.2, which stems from the direct splicing of request URLs and base paths when processing TXT record DNS queries, which may lead to directory traversa...