CVE-2016-2776

CVE-2016-2776 A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776. http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html In this repository you will find: Proof-of-Concept namedown.py Metasploit Auxiliary Module namedown.rb...

wardriving

Wardriving Here you can find all the data about the Wardriving Workshop from Ekoparty 2017. Faraday Plugins The files starting with import are all modules to be used with the Faraday Plugin. In order to run them, download and copy to you faradayinstallation/bin/. For more info on the Faraday Plug...

Atlassian Confluence < 9.2.24 / 9.3.x < 10.2.17 / 11.0.0 (CONFSERVER-104483)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104483 advisory. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final,...

Astra Linux – Vulnerability in Ruby 2.5

The attack vector is a potential Denial of Service DoS attack. The vulnerability arises from an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can create a malicious DNS packet containing a highly compressed domain name. When the resolv library...

CVE-2026-101955

A Stack-based Buffer Overflow vulnerability exists in the UTM Anti-Spam SBL component of Juniper Networks Junos OS on SRX series devices. An unauthenticated remote attacker can exploit this by injecting a malformed DNS packet when Anti-Spam SBL inspection is enabled. This could result in arbitrar...

PT-2026-113808

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX series affected versions not specified Description A stack-based buffer overflow occurs in the UTM Anti-Spam SBL when Anti-Spam SBL inspection is enabled. An unauthenticated remote attacker can exploit this by...

AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.2:CLSA-2026:1768209702)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1768209702 advisory. - The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompresse...

Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.6:CLSA-2026:1768839607)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768839607 advisory. - The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a...

AlmaLinux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.6:CLSA-2026:1768839607)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768839607 advisory. - The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompresse...

ROOT-APP-NPM-CVE-2021-23386 CVE-2021-23386 in dns-packet - Patched by Root

Root has patched CVE-2021-23386 in the dns-packet package for Root:npm. Multiple fixed versions available...

CVE-2026-73508

A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually...

FreeBSD : DNSDist, PowerDNS, PowerDNS Recursor -- vulnerability (7e45952f-9268-11f1-ab2f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7e45952f-9268-11f1-ab2f-3c7c3fba4204 advisory. CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption. Tenable has...

Debian dsa-6420 : pdns-backend-bind - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6420 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/...

UBUNTU-CVE-2026-52682

A crafted DNS packet can cause increased memory and CPU consumption...

PT-2026-75896

A crafted DNS packet can cause increased memory and CPU consumption...

CLSA-2026-1780447839 TuxCare security update for dns-packet (1 CVE)

TuxCare rebuilt dns-packet to address 1 CVE. Fixed in 1.3.1-tuxcare.1...

PT-2026-74929

TuxCare rebuilt dns-packet to address 1 CVE. Fixed in 1.3.1-tuxcare.1...

CVE-2026-42304

A flaw was found in Twisted, specifically within the twisted.names module. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted TCP DNS packet containing deeply chained compression pointers. This can lead to resource exhaustion, causing the...

Updated dnsmasq packages fix security vulnerabilities

CVE-2026-2291: dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS. CVE-2026-4890: A Denial of Service DoS...

CVE-2026-42304

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending...