Microsoft Windows DNS 输入验证错误漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, including all Windows operating systems released under the brand name "Windows Server." Windows Server in Microsoft Windows Server A denial-of-service vulnerability exists in Windows DNS Server. No...

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

CVE-2021-22917

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

Brave Browser Tor Window 安全漏洞

Brave Browser Tor Window is a software application. Achieve outstanding speed, security and privacy by blocking tracking programs. A security vulnerability exists in Brave Browser Tor Window that originates from leaking a user's real IP to an external DNS server...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-2079)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Input Validation in Microsoft

This is a PoC Proof of Concept exploit for CVE-2020-1350, also known as SigRed. The exploit is designed to target DNS servers and allows for remote code execution. The exploit is written in Python and consists of several files: configure.py: This script is used to set up the payload and Apache HT...

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2021-2079)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an...

The vulnerability of DHCP clients for UNIX-based command-line tools like BusyBox, related to integer overflows in value manipulation, allows attackers to trigger a service failure.

The vulnerability of DHCP clients that use UNIX command-line utilities with BusyBox is related to integer overflows. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a domain name with the RFC1035 encoding...

EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2021-2026)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write. Th...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1988)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated samba and ldb packages fix security vulnerabilities

A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...

Server side request forgery (ssrf)

In CRMEB 3.1.0+ strict domain name filtering leads to SSRFServer-Side Request Forgery. The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php...

CVE-2020-21788

The vulnerability CVE-2020-21788 affects CRMEB 3.1.0+ where strict domain name filtering enables SSRF. The vulnerable code is in /crmeb/app/admin/controller/store/CopyTaobao.php. No exploit details or official remediation are provided in the connected documents; exploitation status is not describ...

PT-2021-10666

Name of the Vulnerable Software and Affected Versions: CRMEB versions 3.1.0 and later Description: The issue in CRMEB is related to strict domain name filtering, which leads to Server-Side Request Forgery SSRF. The vulnerable code is located in the file...

CVE-2020-21788: Server-Side Request Forgery (SSRF)

In CRMEB 3.1.0+ strict domain name filtering leads to SSRFServer-Side Request Forgery. The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php...

OESA-2021-1225 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrit...

What is DNS (Domain Name System) Spoofing and Cache Poisoning❓

What Is DNS spoofing? Domain Name System DNS harming and caricaturing are sorts of cyberattack that adventure DNS worker weaknesses to redirect traffic from real workers towards counterfeit ones. Whenever you’ve ventured out to a fake page, you might be astounded on the best way to determine it —...

libcurl: partial password leak over DNS on HTTP redirect

A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

D-Link DIR-2640-US 安全漏洞

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...