CVE-2025-34291_cors_security_scanner

CVE-2025-34291corssecurityscanner 軽量なPythonベースのセキュリティ評価ツール。危険なクロスオリジンリソース共有（CORS）の誤構成を検出します。CVE-2025-34291に対応。 root@kitploit: CORS セキュリティスキャナ 危険なクロスオリジンリソース共有（CORS）の誤構成を検出するための軽量なPythonベースのセキュリティ評価ツールです。 このツールは以下を特定するのに役立ちます: - ワイルドカードCORSポリシー（） - 任意のオリジンのリフレクション - 認証情報付きCORSの誤構成 -...

Security update for bind

This update for bind fixes the following issues: CVE-2022-3094: UPDATE message flood may cause named to exhaust all available memory bsc1207471. CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: amplification vulnerabilities via self-pointed...

SUSE-SU-2026:3517-1 Security update for bind

This update for bind fixes the following issues: - CVE-2022-3094: UPDATE message flood may cause named to exhaust all available memory bsc1207471. - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: amplification vulnerabilities via...

Potential wildcard CNAME RPZ policy bypass

...

CVE-2026-11331

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

CVE-2026-11331

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

CVE-2026-11331 Potential wildcard CNAME RPZ policy bypass

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

EUVD-2022-29940

Malicious code in bioql PyPI...

EUVD-2022-3267

Malicious code in bioql PyPI...

CVE-2018-20744

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...

PT-2019-10198 · Olivier Poitrey · Go Cors Handler

Name of the Vulnerable Software and Affected Versions: Olivier Poitrey Go CORS handler versions 1.3.0 and earlier Description: The issue arises from the active conversion of a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security desig...