9 matches found
PolarDNS
PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...
CVE-2020-1350
CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...
Invoke-DNSteal
Invoke-DNSteal es un exfiltrador de datos DNS simple y personalizable. Esta herramienta te ayuda a exfiltrar datos a través del protocolo DNS sobre UDP y TCP, y te permite controlar el tamaño de las consultas mediante un retardo aleatorio. Además, permite evitar detecciones usando dominios...
CVE-2026-68554
A flaw was found in Coturn, a free open source implementation of TURN and STUN Session Traversal Utilities for NAT Server. An on-path attacker can exploit this vulnerability on plain UDP or TCP by appending attributes after the MESSAGE-INTEGRITY field in an authenticated STUN request. This allows...
Debian: Security Advisory (DLA-3557-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zoom Client for Meetings < 2.5.146186.1130 Vulnerability (ZSB-18001)
The version of Zoom Client for Meetings installed on the remote host is prior to 2.5.146186.1130. It is, therefore, affected by a vulnerability as referenced in the ZSB-18001 advisory. - A vulnerability in the Zoom client could allow a remote, unauthenticated attacker to control meeting...
FreeSWITCH 1.10.6 SIP Flooding Denial Of Service
FreeSWITCH susceptible to Denial of Service via SIP flooding - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-06-freeswitch-flood-dos - Vendor Security Advisory:...
[SECURITY] Fedora 32 Update: coturn-4.5.2-1.fc32
The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...
Denial Of Service (DoS)
rpcbind is vulnerable to denial of service. A use-after-free flaw related to the PMAPCALLIT operation and TCP/UDP connections was discovered in rpcbind. A remote attacker could possibly exploit this flaw to crash the rpcbind service by performing a series of UDP and TCP calls...