DNS-resolve-checker

DNS-resolver Usage bash pdnscheck.sh follow the steps...

CVE-2026-111225

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolat...

CVE-2026-111227

Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields...

EUVD-2026-102340

Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sockqueuetimeout parameter...

CVE-2026-111228 Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php

Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sockqueuetimeout parameter...

CVE-2026-111227

Netgate pfSense CE through version 2.9.0 is vulnerable to a CRLF injection vulnerability in the services_unbound_acls.php component. Authenticated users possessing the DNS Resolver: Access Lists privilege can inject Unbound configuration directives by embedding CR/LF characters in the aclname or ...

EUVD-2026-102337

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolat...

CVE-2026-111225

Netgate pfSense CE versions 2.5.0 through 2.9.0 are vulnerable to an OS command injection in openvpn.learn-address.sh. When DNS Resolver client registration is enabled, authenticated VPN clients can execute commands as the unbound user by embedding shell metacharacters in the certificate common n...

CVE-2026-111225 Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh

Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolat...

CVE-2026-33154

Dynaconf SSTI Vulnerability Report Summary Dynaconf is vulnerable to Server-Side Template Injection SSTI due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates template expressions embedded in configuration values without a sandboxed...

CVE-2025-40778

CVE-2025-40778 Proof of Concept Educational demonstration of DNS Cache Poisoning vulnerability via Additional Records injection. ⚠️ Disclaimer FOR EDUCATIONAL PURPOSES ONLY This tool is provided for educational and authorized security testing purposes only. Unauthorized use of this tool against...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

BIND 9 Cache Poisoning PoC - CVE-2025-40778 Conceptual Overview This vulnerability allows an attacker to corrupt the DNS cache of a BIND Resolver, forcing legitimate users to be redirected to malicious IP addresses without their knowledge. The core logic of the attack: The attack relies on...

CVE-2018-10920_PoC

CVE-2018-10920PoC Knot Resolver CVE-2018-10920 / DO NOT ABUSE...

dns_amplification_scanner

DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...

CLEANSTART-2026-ZA04816 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

CVE-2026-33811 affects multiple packages. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

CLEANSTART-2026-UA66852 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver

Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...

netty-resolver-dns-check

netty-resolver-dns-check Offline checker for three DNS cache poisoning CVEs in io.netty:netty-resolver-dns — CVE-2026-45674 , CVE-2026-47691 and CVE-2026-45673 — and for the question the version number cannot answer: is your application actually using that resolver? If you use Spring WebClient, t...

CVE-2026-87902

CVE-2026-87902 — WordPress Core Path Traversal / LFI / RCE Unauthenticated Local File Inclusion via double-encoded path traversal in WordPress core's page-template resolver, with PEAR-based RCE chain. Vulnerability Details Field| Value ---|--- CVE| CVE-2026-87902 CVSS| 9.2 Critical —...

CVE-2026-107381

svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences in src/ElementReference/Resolver.php builds the SVG reference graph with a case-sensitive href attribute predicate before cleanHrefAttributes normalizes mixed-case names. An attacker can provide xlink:HrEf on...