13201 matches found
EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2026-3827)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
TencentOS Server 2: bind (TSSA-2026:1039)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1039 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
metasploitable2-vsftpd-exploitation
Metasploitable 2 - vsFTPd 2.3.4 익스플로잇 실습 개요 이 프로젝트는 의도적으로 취약하게 구성된 머신 Metasploitable 2 를 대상으로 하는 침투 테스트 워크플로우를 시연합니다. 목표는 FTP 서비스의 알려진 취약점을 식별, 익스플로잇, 분석하여 궁극적으로 루트 수준 접근 을 획득하고 보안 영향을 평가하는 것이었습니다. 실습 환경 구성 공격자 머신: Ubuntu 가상 머신 대상 머신: Metasploitable 2 가상 머신 네트워크 구성: 호스트 전용 네트워크 192.168.56.0/24 대상...
PoC-for-CVE-2025-9074
CVE-2025-9074 - Docker API 未認証アクセス PoC 📌 概要 このリポジトリは、TCP ポート 2375 における Docker Engine API の未認証公開に関するCVE-2025-9074 の概念実証(PoC)エクスプロイトを提供します。 この公開された API にアクセスできる攻撃者は、以下のことが可能です: 認証なしで Docker デーモンと対話する。 任意のイメージをプルする。 ホストファイルシステムへのバインドマウント を備えたコンテナを作成・実行し、ホストを侵害する。 ⚠️ 法的免責事項 この PoC...
Updated bind package fixes security vulnerabilities
Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...
MGASA-2026-0422 Updated bind package fixes security vulnerabilities
Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...
CVE-2020-0796
CVE-2020-0796 動作するエクスプロイトPoC CVE-2020-0796 - リバースバインドシェル Python2.7でテスト済み インストール方法: pip install -r requirements.txt 実行方法: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...
CVE-2026-19941
creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...
CVE-2026-19668
creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...
CVE-2026-19662
creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...
EulerOS Virtualization 2.12.1 : bind (EulerOS-SA-2026-3576)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
ISC BIND 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 DoS (CVE-2026-77692)
The version of ISC BIND running on the remote host is 9.20.0 through 9.20.27 or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by a vulnerability : - An attacker can cause named to abort by sending a crafted...
EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3682)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...
EulerOS Virtualization 2.12.1 : dhcp (EulerOS-SA-2026-3581)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a speciall...
EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2026-3489)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a special...
ISC BIND 9.18.0 < 9.20.29 / 9.18.11-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities
The version of ISC BIND running on the remote host is 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.18.11-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple...
ISC BIND 9.11.0 < 9.20.29 / 9.11.3-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities
The version of ISC BIND running on the remote host is 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.11.3-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple vulnerabiliti...
EulerOS Virtualization 2.11.0 : dhcp (EulerOS-SA-2026-3496)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer fr...
EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2026-3402)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a special...
EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3730)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...