tldfinder

TLDFinder Возможности • Установка • Использование • Запуск tldfinder • Присоединиться к Discord Компактный инструмент для обнаружения приватных TLD в целях исследования безопасности. Возможности DNS-запросы на основе TLD пассивные DNS-запросы на основе TLD активные Вывод в STD IN/OUT и TXT/JSON...

DNSHighJackMonitoring

Мониторинг перехвата DNS Обзор Скрипты для выявления попыток перехвата DNS после раскрытий в январе 2019 года https://www.us-cert.gov/ncas/alerts/AA19-024A https://blog.talosintelligence.com/2018/11/dnspionage-campaign-targets-middle-east.html...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

richkit

Richkit Richkit — это пакет для Python 3, предоставляющий инструменты, которые принимают доменное имя на вход и возвращают дополнительную информацию об этом домене. Это может быть анализ самого домена, поиск в базах данных, получение из других сервисов или их комбинация. Цель Richkit — предостави...

icannTLD

icannTLD Corelight-update теперь можно использовать для создания и поддержания входных файлов icannTLD. Описание скрипта Скрипт Zeek, использующий официальный список доменов верхнего уровня TLD ICANN с Input Framework для извлечения соответствующей информации из DNS-запроса и определения, являетс...

EUVD-2026-52435

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...

CVE-2026-18647 jina-ai reader Crawler/Puppeteer crawler.ts isValidTLD server-side request forgery

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...

PT-2026-67509

Name of the Vulnerable Software and Affected Versions jina-ai reader versions up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 Description A flaw in the Crawler/Puppeteer component allows remote attackers to perform server-side request forgery SSRF, a technique where an attacker induces a server-si...

ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

Impact The RSASHA256Algorithm and RSASHA1Algorithm contracts fail to validate PKCS1 v1.5 padding structure when verifying RSA signatures. The contracts only check if the last 32 or 20 bytes of the decrypted signature match the expected hash. This enables Bleichenbacher's 2006 signature forgery...

EUVD-2026-8679

ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS1 v1.5 Padding Validation...

CVE-2026-22866 ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

Ethereum Name Service ENS is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the RSASHA256Algorithm and RSASHA1Algorithm contracts fail to validate PKCS1 v1.5 padding structure when verifying RSA signatures. The contracts only check...

CVE-2017-18404

cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD SEC-341...

EUVD-2000-0010

Malware in sbrugna...

EUVD-2007-6145

Malware in sbrugna...

EUVD-2017-9520

Malware in sbrugna...

MAL-2025-20085 Malicious code in express-tld (npm)

The package express-tld was found to contain malicious code...

Malicious code in express-tld (npm)

The package express-tld was found to contain malicious code...

google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability

Summary A Server-Side Request Forgery SSRF Vulnerability is present in applications utilizing the google-translate-api-browser package and exposing the translateOptions to the end user. An attacker can set a malicious tld, causing the application to return unsafe URLs pointing towards local...

Server side request forgery (ssrf)

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery SSRF Vulnerability is present in applications utilizing the google-translate-api-browser package and exposing the translateOptions to the end user. An attacker can set ...

CVE-2023-48711 Server-Side Request Forgery (SSRF) Vulnerability in google-translate-api-browser

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery SSRF Vulnerability is present in applications utilizing the google-translate-api-browser package and exposing the translateOptions to the end user. An attacker can set ...