3207 matches found
信息收集
This repository is an information collection tool for penetration testing and vulnerability assessment. It is a collection of scripts and tools for gathering information about a target system or network. The repository is written in Python and includes various modules for different tasks such as...
Microsoft Windows DNS Denial of Service Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows DNS Server is one of the DNS Domain Name System servers. A denial o...
The vulnerability of the managed-keys function in the DNS BIND server allows for unlimited resource distribution, enabling attackers to cause service failures.
The vulnerability of the managed-keys function in the DNS BIND server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2020-5347
Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses...
PT-2020-5516 · Node.Js +7 · Node.Js +7
Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 12.19.1 Node.js versions prior to 14.15.1 Node.js versions prior to 15.2.1 Description: The issue is related to an uncontrolled resource consumption in Node.js, which can be exploited by a remote attacker to cause a...
bind: TCP Pipelining doesn't limit TCP clients on a single connection
A flaw was found in the way bind limited the number of TCP clients that can be connected at any given time. A remote attacker could use one TCP client to send a large number of DNS requests over a single connection, causing exhaustion of the pool of file descriptors available to named, and...
TP-Link Archer A7 AC1750 Buffer Overflow Vulnerability
The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. A buffer overflow vulnerability exists in the handling of DNS responses in the TP-Link Archer A7 using firmware version 190726 AC1750. A remote attacker could exploit this vulnerability to execute arbitrary code with the he...
TP Link Archer Code Execution Vulnerability
The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An input validation error vulnerability in the processing of DNS responses in the TP-Link Archer A7 using firmware version 190726 AC1750 arises from the program failing to properly validate DNS responses before proceeding...
The vulnerability of the mDNS protocol used by Cisco Webex Meetings Client software for web conferencing on the MacOS operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the mDNS protocol used in Cisco Webex Meetings Client software for MacOS operating systems is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the DNS functions of the CentOS Web Panel application management server, related to the lack of measures for cleaning input data, allows a perpetrator to execute cross-site attacks.
DNS Functionality of the CentOS Web Panel application is vulnerable. Exploiting this vulnerability could allow a malicious actor to execute cross-site scripting attacks from a remote location...
The vulnerability of the managed-keys function in the DNS BIND server allows a attacker to cause a service failure.
The vulnerability of the managed-keys function in the DNS BIND server is related to a key validation error, especially when an unsupported algorithm is used. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the DNS BIND server, related to data processing errors, allows a hacker to cause a service failure.
The vulnerability of the DNS BIND server is related to data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users
If you use the Firefox web browser, here's an important update that you need to be aware of. Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS server configuration in the settings. That means,...
The vulnerability of the DNS processing component on the Samba network communication server allows a attacker to cause a service failure.
The vulnerability of the DNS processing component on the Samba network communication server is related to the handling of the null pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures...
DEBIAN-CVE-2014-3484
Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...
UBUNTU-CVE-2014-3484
Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...
The vulnerability of the DNS BIND server, related to a data transfer management error for dynamic zones, allows attackers to access confidential data.
The vulnerability of the BIND DNS server relates to a data transfer management error when dynamic zones are writable. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
DEBIAN-CVE-2015-2689
Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...
UBUNTU-CVE-2015-2689
Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...