Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/06 2:42 p.m.•15 views

CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

10CVSS7.8AI score0.96721EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/10/01 1:15 p.m.•11 views

CVE-2019-19781

CVE-2019-19781 Módulo de CVE-2019-19781 para Router Scan Project Cómo Usar Preparación pip3 install ipcalc,requests Uso python3 scanner.py Derechos de autor Parte de este repositorio que envía la respuesta tcp está parcialmente bifurcada de trustedsec/cve-2019-19781 con algunos cambios para las...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits48References2
Kitploit
Kitploit
•added 2026/10/01 1:15 p.m.•12 views

CVE-2018-13379

CVE-2018-13379 Módulo de CVE-2018-13379 para Router Scan Project Cómo Usar preparación pip3 install time,threading,ipcalc,requests uso python3 exp.py -f list.txt Derechos de autor Parte de este repositorio que envía la respuesta TCP está parcialmente bifurcado de milo2012/CVE-2018-13379 con algun...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits22References2
NVD
NVD
•added 2026/09/16 9:17 a.m.•14 views

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS0.0048EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 9:17 a.m.•17 views

DEBIAN-CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/16 9:17 a.m.•14 views

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/16 8:30 a.m.•20 views

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-81634: Heap-based Buffer Overflow

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/22 11:09 a.m.•9 views

OESA-2025-2720 python-kdcproxy security update

This package contains a Python WSGI module for proxying KDC requests over HTTP by following the MS-KKDCP protocol. It aims to be simple to deploy, with minimal configuration. Security Fixes: If kdcproxy receives a request for a realm which does not have server addresses defined in its...

8.6CVSS7.3AI score0.00522EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/11/20 5:58 a.m.•37 views

python-kdcproxy: Remote DoS via unbounded TCP upstream buffering

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

5.9CVSS6.4AI score0.00522EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•1 views

CVE-2025-59089: Allocation of Resources Without Limits or Throttling

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

5.9CVSS6.4AI score0.00522EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/27 4:31 p.m.•19 views

MGASA-2023-0270 Updated glibc packages fix security and other bugs

getaddrinfo: Fix use after free in getcanonname CVE-2023-4806 Stack read overflow with large TCP responses in no-aaaa mode CVE-2023-4527 elf: Introduce to dlcallfini elf: Do not run constructors for proxy objects elf: Always call destructors in reverse constructor order BZ 30785 elf: Remove unuse...

6.5CVSS6.6AI score0.01669EPSS
SaveExploits1References4
Rows per page
Query Builder