385 matches found
Velociraptor 0.7.2 Release: Digging Deeper than Ever with EWF Support, Dynamic DNS and More
By Dr. Mike Cohen and Carlos Canto Rapid7 is very excited to announce that version 0.7.2 of Velociraptor is now fully available for download. In this post we’ll discuss some of the interesting new features. EWF Support Velociraptor has introduced the ability to analyze dead disk images in the pas...
CVE-2024-4236
A vulnerability, which was classified as critical, has been found in Tenda AX1803 1.0.0.1. This issue affects the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the argument serverName/ddnsUser/ddnsPwd/ddnsDomain leads to stack-based buffer overflow. The attack ma...
PT-2024-22258 · Technicolor · Tc8715D
Name of the Vulnerable Software and Affected Versions: Technicolor TC8715D version TC8715D-01.EF.04.38.00-180405-S-FF9-D Description: The issue allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the User name in the "dyn dns.asp" page. This enables the attacker to...
RHEL 8 : bind (RHSA-2024:1406)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1406 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...
CentOS 9 : bind-9.16.23-9.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-9.el9 build changelog. - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to ...
CVE-2023-7227
SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system DDNS settings that could allow an attacker to execute arbitrary commands with root privileges...
SystemK NVR Command Injection Vulnerability
SystemK NVR is a network video recorder. A security vulnerability exists in SystemK NVR 504/508/516 2.3.5SK.30084998 and prior versions, which stems from a command injection vulnerability contained in the settings of the Dynamic Domain Name System DDNS that allows an attacker to execute arbitrary...
PT-2024-1439 · Unknown · Systemk Nvr
Name of the Vulnerable Software and Affected Versions: SystemK NVR versions 2.3.5SK.30084998 and prior Description: The issue is related to a command injection vulnerability in the dynamic domain name system DDNS settings. This vulnerability could allow an attacker to execute arbitrary commands...
CVE-2023-51730
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...
What Is Dynamic DNS
Delving into the Multiple Aspects of the Dynamic Domain Name Protocol DDNS: A Detailed Scrutiny DDNS, standing for Dynamic Domain Name System, is an automatic procedure crafted to maintain the synchronization of the data associated with a DNS server. This system functions uninterruptedly to make...
Oracle Linux 8 : bind (ELSA-2023-7177)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7177 advisory. - Prevent exahustion of memory from control channel CVE-2023-3341 - Prevent the cache going over the configured limit CVE-2023-2828 - Prevent flooding with UPDA...
PT-2023-9173
Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. The flaw exists within the handling of DNS names d...
PT-2023-9172
Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The issue is related to the use of weak protection mechanisms in the cmxddnsd executable of the TP-Link Omada ER605 router's firmware. This allows a remote attacker to execute...
RHEL 8 : bind (RHSA-2023:7177)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7177 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, allows a hacker to execute arbitrary code.
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, is related to an issue with buffer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2023-9174
Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The TP-Link Omada ER605 contains a stack-based buffer overflow flaw. This allows network-adjacent attackers to execute arbitrary code on affected devices. Authentication is not...
PT-2023-9171 · Tp Link · Tp-Link Omada Er605
Name of the Vulnerable Software and Affected Versions: TP-Link Omada ER605 versions affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the TP-Link Omada ER605 router's firmware, specifically in the handling of Comexe DDNS responses. This allows a...
D-Link DI-7003G Buffer Error Vulnerability
The D-Link DI-7003G is a wireless router from China-based D-Link. The D-Link DI-7003G suffers from a buffer error vulnerability that can be exploited to execute arbitrary code via the wild/mx parameter of the ddns.asp function...
