449 matches found
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
[SECURITY] Fedora 41 Update: unbound-1.24.1-1.fc41
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
Exploit for CVE-2025-40778
CVE-2025-40778 Proof of Concept Educational demonstration of...
CVE-2025-40780
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
Forward to Hell? on the Potentials of Misusing Transparent DNS Forwarders in Reflective Amplification Attacks
The DNS infrastructure is infamous for facilitating reflective amplification attacks. Various countermeasures such as server shielding, access control, rate limiting, and protocol restrictions have been implemented. Still, the threat remains throughout the deployment of DNS servers. In this paper...
EUVD-2021-16073
Malware in sbrugna...
EUVD-2019-15583
Malware in sbrugna...
RLSA-2025:7094 Moderate: aardvark-dns security update
Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in src/backend/mod.rs. Security Fixes: containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service CVE-2024-8418 For more details...
EUVD-2023-54271
Malicious code in bioql PyPI...
Malicious Package
Overview promise-with-resolvers-polyfil is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in filament-resolvers-quito-jabbah (npm)
The package filament-resolvers-quito-jabbah was found to contain malicious code...
MAL-2025-46602 Malicious code in websockets-singularity-tailwindcss-resolvers (npm)
The package websockets-singularity-tailwindcss-resolvers was found to contain malicious code...
Malicious code in exoplanet-webdriverio-bootes-resolvers (npm)
The package exoplanet-webdriverio-bootes-resolvers was found to contain malicious code...
Malicious code in jasmine-arcturus-pegasus-resolvers (npm)
The package jasmine-arcturus-pegasus-resolvers was found to contain malicious code...
Malicious code in duplex-gemini-resolvers-norma (npm)
The package duplex-gemini-resolvers-norma was found to contain malicious code...
MAL-2025-44080 Malicious code in duplex-gemini-resolvers-norma (npm)
The package duplex-gemini-resolvers-norma was found to contain malicious code...
MAL-2025-45818 Malicious code in resolvers-umbra-chai-uninstall (npm)
The package resolvers-umbra-chai-uninstall was found to contain malicious code...