CaA

Insight into information, exploring with intelligence in a thousand ways. First Author: EvilChen Second Author: 0chenccMystery Security Team Third Author: MingXiMystery Security Team README Version: English | 简体中文 Project Introduction CaA is an auxiliary project in the field of cybersecurity...

Cloudflare Universal SSL CAA record override

RISK EVALUATION Cloudflare customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so...

CVE-2026-14440

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design e.g. 'issue "letsencrypt.org"' without parameters. On Universal SSL zones,...

CVE-2026-14440 Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design e.g. 'issue "letsencrypt.org"' without parameters. On Universal SSL zones,...

CVE-2026-14440

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design e.g. 'issue "letsencrypt.org"' without parameters. On Universal SSL zones,...

CVE-2026-14440: Protection Mechanism Failure

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design e.g. 'issue "letsencrypt.org"' without parameters. On Universal SSL zones,...

PT-2026-54701

Name of the Vulnerable Software and Affected Versions Cloudflare affected versions not specified Description Cloudflare's Universal SSL feature automatically manages the Certification Authority Authorization CAA Resource Record Set RRset for customer zones. This auto-managed RRset is permissive a...

EUVD-2025-137037

Malicious code in imodiov-omfi-caa npm...

EUVD-2018-13430

Malware in sbrugna...

CVE-2018-20892

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

3s-smart Software Solutions CODESYS Control Operating System Command Injection Vulnerability

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3s-smart Software Solutions, Germany. An operating system command injection vulnerability exists in 3s-smart Software Solutions CODESYS Control versions prior to 4.11.0.0. The...

3yrs of CAA ASSURE assessments. What we’ve learned

Introduction Were now in our third year of CREST CAA ASSURE auditing and weve learned a lot. The Cyber Assessment Framework CAF is big, theres no denying that. It’s not something that you can complete overnight, it’s not something that requires minimal effort and can just be thrown at an auditor ...

SUSE CVE-2019-9022

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

CVE-2022-39165

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183...

CVE-2022-39165

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183...

CVE-2022-39165

CVE-2022-39165 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. It is a local, non-privileged user vulnerability in the CAA component that can cause a denial of service. The IBM security bulletin notes an impact of Availability (A) = High with Privileges Required = None and Local access. AIX/VIOS patc...

CVE-2022-39165 IBM AIX denial of service

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183...

CVE-2022-39165: Uncontrolled Resource Consumption

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183...

AIX 7.2 TL 5 : kernel (IJ43869)

https://vulners.com/cve/CVE-2022-39164 https://vulners.com/cve/CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX 7.2 TL 5 : kernel (IJ44116)

https://vulners.com/cve/CVE-2022-39164 https://vulners.com/cve/CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...