CVE-2020-1350

CVE-2020-1350 SIGRed 拒绝服务 PoC 漏洞利用 本仓库包含我编写的针对 SIGRed 漏洞的 DoS PoC 漏洞利用版本，该漏洞由微软和 Check Point Research 于 2020 年 7 月 14 日披露。 @maxpl0it 也编写了一个 PoC 并于 7 月 15 日发布，但我对漏洞利用的构建方式与他们略有不同，因此我认为发布此工具仍能带来价值——帮助蓝队提升检测能力，并提供另一组可供测试的数据。 该仓库还包含一个 PCAP 文件，展示了该漏洞利用在网络上的表现形式。 实验环境 我尝试搭建必要的域以进行公开测试，但在使 NS...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows DNS service for operating systems is related to the lack of integrity checking during message transmission over the communication channel. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows DNS service for Windows operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows DNS service for Windows operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...

PT-2023-3119 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Windows DNS service. This can allow a remote attacker to conduct spoofing attacks...

PT-2021-6316 · Microsoft · Windows Dns +1

Name of the Vulnerable Software and Affected Versions: Windows DNS affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows DNS service, allowing an attacker to elevate their privileges. This can impact the system, potentially leading to...

PT-2021-2619 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows DNS service, which can be exploited by a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Windows DNS service for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows DNS service for Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted DNS requests...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...