Tallow

Tallow - Windows向け透過的Tor Tallowは、Windowsマシンからのすべての送信トラフィックをTor匿名ネットワーク経由でリダイレクトする小さなプログラムです。Torで処理できないトラフィック（例：UDP）はブロックされます。Tallowはまた、DNSリクエストをインターセプトして処理し、潜在的な漏洩を防ぎます。 Tallowにはいくつかの用途があります。例えば： Torを使うように設計されていなかったアプリケーションを「Tor対応化」する フィルタ回避 -- ローカルフィルタをバイパスしたいが匿名性にはあまり関心がない場合...

dnsdiag

DNS測定、トラブルシューティング、セキュリティ監査ツールセット ISP が DNS トラフィックを傍受 していないか疑問に思ったことはありませんか？ DNS 応答に異常な挙動を感じたり、間違ったアドレスにリダイレクトされたりして、DNS に問題があるのではと疑ったことはありませんか？ このツールセットは、DNS リクエストと応答の基本的な監査を実行し、DNS が期待通りに機能していることを確認するのに役立ちます。 dnsping を使用すると、任意のクエリに対する任意の DNS サーバーの応答時間を測定できます。通常の ping ユーティリティと同様に、dnsping は DNS...

CVE-2026-47107

Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authenticated users to write arbitrary entries to /etc/hosts, /etc/resolv.conf, and...

GHSA-GX3X-VQ4P-MHHV cert-manager-controller DoS via Specially Crafted DNS Response

Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...

EUVD-2020-28435

Malware in sbrugna...

Viasat多款产品 安全漏洞

Viasat RM5110 and others are products of Viasat, Inc.Viasat RM5110 is a satellite modem router.Viasat RM5111 is a satellite modem router.Viasat RG1100 is a modem router. A security vulnerability exists in several Viasat products that stems from dynamic DNS traffic interception that could lead to ...

The vulnerability of the PPPoE configuration process of D-Link’s router software D-Link DIR-2640-US allows a hacker to alter routing information, intercept DNS requests, and perform phishing attacks.

The vulnerability of the PPPoE configuration process of D-Link DIR-2640-US router software lies in the presence of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to alter routing information, intercept DNS requests, and carry out phishing attacks from a...

Design/Logic Flaw

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining...

CVE-2020-7308 Transmission of data in clear text by McAfee ENS

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining...

The vulnerability of Zyxel Wi-Fi transponders lies in the use of pre-set credentials, which allows attackers to intercept DNS requests.

The vulnerability of the Zyxel Wi-Fi signal relay stems from the use of pre-set account credentials “root” and “admin” default password: 1234 during Telnet protocol connections. Exploiting this vulnerability allows a remote attacker to intercept DNS requests by reconfiguring the built-in...