Dnss Domain Name Search Software - 'Name' Denial of Service (PoC)

Exploit Title: Dnss Domain Name Search Software - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/networksleuthsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Pro...

Dnss Domain Name Search Software - (Key) Denial of Service Exploit

Exploit Title: Dnss Domain Name Search Software - 'Key' Denial of Service PoC Exploit Author : Ismail Tasdelen Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/networksleuthsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

DEBIAN-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

chromium-browser: Incorrect security UI in Omnibox

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

chromium-browser: Incorrect security UI in Omnibox

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

USN-4217-2 samba vulnerabilities

USN-4217-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly use this...

CVE-2019-13757

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

CVE-2019-13742

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46757)

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof Omnibox content address bar with the help of a specially crafted domain name...

Google Chrome Omnibox Input Validation Error Vulnerability (CNVD-2019-46760)

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. Google Chrome Omnibox suffers from an input validation error vulnerability that stems from the program's failure to fully implement policies. The vulnerability can be exploited by an attacker to spoof a...

PT-2019-6141 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to an integer overflow in a size calculation in the dnscrypt/dnscrypt.c component of the Unbound DNS server. This could potentially allow a remote attacker to access confidenti...

ALPINE-CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default...

CVE-2019-13761

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

Design/Logic Flaw

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

Code injection

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

UBUNTU-CVE-2019-13757

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

UBUNTU-CVE-2019-13761

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

Code injection

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2019-13739

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

CVE-2019-13761

CVE-2019-13761 affects Google Chrome/Chromium Omnibox UI, where a security UI flaw allowed domain spoofing via IDN homographs in crafted domain names. Root cause: incorrect security UI in Omnibox. Impact: remote attacker could spoof domains; no exploit details provided in the sources. Remediation...