The vulnerability in the processing of DNS packets through the IPv6 protocol of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of DNS packet processing through the IPv6 protocol on Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptio...

The vulnerability of the BIND DNS server’s forwarding directive configuration allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the Forwarders directive configuration of the DNS BIND server is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to carry out a DNS Rebinding type attack...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Input Validation Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

CVE-2020-3191

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...

Attackers Claim Identity of Financial NGO to Steal Sharepoint, Office Credentials

A new phishing campaign is targeting investment brokers with fraudulent emails aimed at stealing their Microsoft SharePoint and Office credentials, by invoking the identity of a credible financial regulatory organization. The “widespread, ongoing phishing campaign” is using emails that claim to b...

DEBIAN-CVE-2020-12474

Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL...

The vulnerability of the DHCP server dhcpd and the DNS server BIND, related to resource release errors, allows a perpetrator to cause service failure.

The vulnerability of the DHCP server dhcpd and the DNS server BIND is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

bind: TCP Pipelining doesn't limit TCP clients on a single connection

A flaw was found in the way bind limited the number of TCP clients that can be connected at any given time. A remote attacker could use one TCP client to send a large number of DNS requests over a single connection, causing exhaustion of the pool of file descriptors available to named, and...

unbound: command injection with data coming from a specially crafted IPSECKEY answer

A shell command injection vulnerability was discovered in the way unbound handles DNS queries for systems with a public key used for IPsec. When ipsecmod is enabled, a malicious DNS server could send a DNS reply which would be used during a following DNS query to execute shell commands with the...

dnsmasq: memory leak in the create_helper() function in /src/helper.c

A flaw was found in the Dnsmasq application where a remote attacker can trigger a memory leak by sending specially crafted DHCP responses to the server. A successful attack is dependent on a specific configuration regarding the domain name set into the dnsmasq.conf file. Over time, the memory lea...

信息收集

This repository is an information collection tool for penetration testing and vulnerability assessment. It is a collection of scripts and tools for gathering information about a target system or network. The repository is written in Python and includes various modules for different tasks such as...

Microsoft Windows DNS Denial of Service Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows DNS Server is one of the DNS Domain Name System servers. A denial o...

The vulnerability of the Omnibox address bar in Google Chrome, related to insufficient validation of entered data, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity by using a specially created domain name...

The vulnerability of the managed-keys function in the DNS BIND server allows for unlimited resource distribution, enabling attackers to cause service failures.

The vulnerability of the managed-keys function in the DNS BIND server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Unspecified Vulnerability in Pulse Secure Pulse Connect Secure

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Secure Pulse Connect Secure suffers from a security vulnerability that can be exploited by attackers for DNS rebinding...

CVE-2020-5347

Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses...

Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others

A spear-phishing attack this week hooked a customer service employee at GoDaddy.com, the world's largest domain name registrar, KrebsOnSecurity has learned. The incident gave the phisher the ability to view and modify key customer records, access that was used to change domain settings for a...

PT-2020-5516

Name of the Vulnerable Software and Affected Versions Node.js versions prior to 12.19.1 Node.js versions prior to 14.15.1 Node.js versions prior to 15.2.1 Description The issue is related to an uncontrolled resource consumption in Node.js, which can be exploited by a remote attacker to cause a...

bind: TCP Pipelining doesn't limit TCP clients on a single connection

A flaw was found in the way bind limited the number of TCP clients that can be connected at any given time. A remote attacker could use one TCP client to send a large number of DNS requests over a single connection, causing exhaustion of the pool of file descriptors available to named, and...