got-responded

| |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to use tools like...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

Responder

Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...

Responder

⛔ DEPRECATED Active at https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Author: Laurent Gaffie http://www.spiderlabs.com Intro Responder an LLMNR, NBT-NS and MDNS poisoner. It will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see:...

CVE-2020-1350

CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...

i18next-http-backend input validation error vulnerability

Version 4.0.2 of i18next-http-backend contains an input validation error vulnerability. This flaw stems from an incomplete fix in interpolateUrl, allowing attackers to redirect translation requests by providing a ns value starting with a slash. As a result, protocol-relative URLs hosted by...

CVE-2026-85555

DNSSEC validation bypass and cache poisoning in PowerDNS Recursor via out-of-band NS resolution...

UBUNTU-CVE-2026-85555

DNSSEC validation bypass and cache poisoning in PowerDNS Recursor via out-of-band NS resolution...

PT-2026-121963

In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mnt ns release drops the last passive reference of a mount namespace and removes its fanotify marks via fsnotify mntns delete. That takes the mutex of...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792630839)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792630839 advisory. - Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This...

PT-2026-135246

DNSSEC validation bypass and cache poisoning in PowerDNS Recursor via out-of-band NS resolution...

CVE-2026-85555

DNSSEC validation bypass and cache poisoning in PowerDNS Recursor via out-of-band NS resolution...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46038)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46047)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove In the remove callback, if a packet arrives after destroyworkqueue is called, but before sockrelease, the qrtrnsdataready callback will try to queue the work, causing...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46026)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does no bound checking on the number of lookups a client can perform. Though the code restricts the lookups to local clients, there is still a possibility of a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does not perform any bounds checking on the number of lookups a client can perform. Although the code restricts lookups to local clients, there remains a risk that a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver does not limit the number of nodes it handles. This can be an attack vector if a malicious client starts registering random nodes, leading to memory...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove In the remove callback, if a packet arrives after destroyworkqueue is called but before sockrelease, the qrtrnsdataready callback will attempt to queue the work, leading to a...

Linux Distros Unpatched Vulnerability : CVE-2026-98815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in 0 - the code there is heavily based on the NVMe code. Currently the NS...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye When a node is about to go down, it sends a BYE packet. Therefore, the nameserver should advertise the removal of the node to all remote and local observers, and finally free the...