PT-2026-70469

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A race condition occurs in the Windows Bind Filter Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

CVE-2026-61934: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-70883

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.5 Description A misinteraction between agent locking and the [email protected] extension in ssh-agent allows certain operations intended only for local use to be performed remotely. This occurs because a...

MGASA-2026-0331 Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

SUSE-SU-2026:3554-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: cache...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

UBUNTU-CVE-2026-68264

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset currentop in xeptupdateopsinit xeptupdateopsinit fails to reset currentop to 0. On the vmbind path, opsexecute calls xeptupdateopsprepare inside the xevalidationguard / drmexecuntilalllocked loop. When that loop...

EUVD-2026-55423

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

Security Bulletin:Vulnerability in bind affects IBM Netezza Appliance

Summary The bind package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2026-1519, CVE-2025-40778 Vulnerability Details CVEID:CVE-2026-1519 DESCRIPTION: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, th...

Security Bulletin:Vulnerability in BIND 9 affects IBM Netezza Appliance

Summary The BIND 9 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5946 Vulnerability Details CVEID:CVE-2026-5946 DESCRIPTION: Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet...

PT-2026-69664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the function xe pt update ops init fails to reset the current op variable to 0. During the vm bind path, the ops execute function calls xe pt...

Redis BIND Session

BIND payload for listeners/database/redis !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "Redis BIND Session", "description": "BIND payload for listeners/database/redis", "category":...

Elasticsearch BIND Session

BIND payload for listeners/database/elasticsearch !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "Elasticsearch BIND Session", "description": "BIND payload for...

Kubernetes API BIND

BIND payload for listeners/container/kubernetesapi. Operator authenticates to the cluster API kubeconfig, token, or in-cluster SA on operator host. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.kubernetesbind import buildkubernetesbindhint class ModulePayload: info...

MySQL BIND session launcher

Connect the framework MySQL BIND listener with supplied or session-stored credentials and register an interactive MySQL session. !/usr/bin/env python3 -- coding: utf-8 -- """ Open a MySQL BIND framework session using known credentials. Chains after auxiliary/scanner/mysql/mysqlloginbruteforce or...

Azure VM Run Command BIND

BIND payload for listeners/azure/runcommand. After VM metadata is known, the framework runs commands via Azure Run Command operator-side SDK. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import class ModulePayload: info = "name": "Azure VM Run Command BIND", "description": "BIND...

PostgreSQL BIND Session

BIND payload for listeners/database/postgresql direct psycopg2 session !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "PostgreSQL BIND Session", "description": "BIND payload for...