810 matches found
dns_client_fuzzing
Fuzzing the Microsoft Windows DNS client After the critical vulnerability of CVE-2026-41096 was discovered, I decided to take a crack at this...
CVE-2020-1350-DoS
CVE-2020-1350 SIGRed - Windows DNS DoS Exploit Credits for the bug are entirely down to Check Point Research @cpresearch who did an incredible writeup of this bug props to @sagitz for the post Their writeup can be found here. This exploit was written by @maxpl0it Quick summary of how it works: 1...
CVE-2020-1350-Fix
KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...
CVE-2020-1350
CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...
SIGRed
CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...
CVE-2020-1350
Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...
cve-2020-1350
This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS. NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can...
dRMM-CVE-2020-1350-response
Overview Microsoft announced CVE-2020-1350 on July 14 2020. This vulnerability in Windows DNS server goes back to Server 2003 and is broadly thought to be wormable. This script follows the intructions from KB456509...
CVE-2020-1350_HoneyPoC
This is an educational exercise. Use at your own risk. CVE-2020-1350 Exploit aka SIGRED This is a lesson as to why you should not trust binaries on the internet., the workaround fix is genuine. Workaround Fix reg add "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v...
CVE-2026-70166
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network...
CVE-2026-70155
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-70119
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-70079
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-70082
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-70074
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...
EUVD-2026-99865
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...
CVE-2026-70074
A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...
CVE-2026-70119
An out-of-bounds read vulnerability exists in Windows DNS . This flaw allows an authorized attacker to achieve remote code execution over a network. While the specific affected versions or internal components are not detailed in the provided documents, the vulnerability is confirmed to impact the...