krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3, ldap3-ad-auth and dnspython to function. Requirements can be installed with pip install -r requirements.txt More info about this toolkit available in my blog...

eavesarp

Eavesarp A reconnaissance tool that analyzes ARP requests to identify hosts that are likely communicating with one another, which is useful in those dreaded situations where LLMNR/NBNS aren't in use for name resolution. Brought to you by: Requirements/Installation This is only gon' work on Kali o...

pretender

pretender Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing pretender is a tool developed by RedTeam Pentesting to obtain machine-in-the-middle positions via spoofed local name resolution and DHCPv6 DNS takeover attacks. pretender...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect For educational purposes only Run $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploit Normal query $ dig @127.0.0.1 nxdomain.example.com nxdomain can be replaced by anything that means non-existent domain name. e.g...

CVE-2026-112188

MISP versions prior to 2.5.48 are vulnerable to a server settings lookup flaw. When an authenticated user requests a branch name (e.g., Security, MISP, or Plugin) instead of a specific leaf setting, the system returns the entire configuration sub-tree. Because branch nodes lack a redaction flag, ...

CVE-2026-112188 MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name such...

ngrep

ngrep 1.49.0 2.7.2026 ngrep è come GNU grep applicato al livello di rete. È uno strumento basato su PCAP che consente di specificare un'espressione estesa regolare o esadecimale per confrontare i payload dei pacchetti. Supporta molti tipi di protocolli, inclusi IPv4/6, TCP, UDP, ICMPv4/6, IGMP e...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2021_3157)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213157 advisory. Mozilla: Uninitialized memory in a canvas object could have led to memory corruption CVE-2021-29980 Mozilla: Incorrect instruction reordering during JIT...

SUSE CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...

CVE-2026-96746 Heap buffer overflow via mid-scan command list growth in client topology monitoring

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-69186

c-ares , an asynchronous DNS resolver library, is affected by a memory-amplification denial of service in ares_dns_parse(). Prior to 1.34.7 , the function trusts attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT header fields without first confirming the response contains enough bytes for the cla...

EUVD-2026-83212

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...

DEBIAN-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

UBUNTU-CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-89092

CVE-2026-89092 affects the nscd (Name Service Cache Daemon) service in GNU C Library 2.3.4 and later . The root cause is an unbounded alloca call that triggers a stack overflow when a malicious or compromised DNS server returns an excessively large response to a DNS query. The primary impact is a...

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Two NLTK sites executed the Graphviz dot program by bare name, so process creation resolved it via the search path — and on Windows via the current working directory — rather than a validated absolute location. An attacker who can place a file named dot where resolution looks the CWD on Windows, ...

CVE-2026-81383

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81383

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73851

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81383

Visual Studio Code is affected by an information disclosure vulnerability caused by the use of an incorrectly-resolved name or reference . An unauthorized network-based attacker can disclose information, with high confidentiality impact and changed scope (affecting other components). The attack r...