CVE-2022-33991: Authentication Bypass by Spoofing

dproxy-nexgen aka dproxy nexgen forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

Malicious code in dns-query-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0635b42bc1e9f80ab9d52b19bf28a63e998f3305fc5a5807bd66a458fd46f9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2541 Malicious code in dns-query-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0635b42bc1e9f80ab9d52b19bf28a63e998f3305fc5a5807bd66a458fd46f9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the DNS query handler in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of the DNS query handler in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to...

CLSA-2022-1650377131 Fix CVE(s): CVE-2022-28391

SECURITY UPDATE: possible remote code execution - debian/patches/CVE-2022-28391.patch: fix possible terminal injection attacks from DNS query results - CVE-2022-28391...

CLSA-2022-1650377094 Fixed CVE-2022-28391 in busybox

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

Fix of CVE: CVE-2022-28391

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

DEBIAN-CVE-2022-24793

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This vulnerability is related to...

Mageia: Security Advisory (MGASA-2019-0009)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

nse-log4shell Nmap NSE scripts to check against log4shell or...

The vulnerability of the web interface of the D-Link DIR-868LW router’s microprogramming software allows a hacker to obtain a record of user DNS requests.

The vulnerability of the web interface of D-Link DIR-868LW router software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to obtain user DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

Authentication flaw

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

The CVE-2021-33259 issue affects the D-Link DIR-868LW router (version 1.12b) where several web interfaces allow access without authentication. The root cause is a lack of authentication requirements for multiple web interfaces, enabling an attacker to view users’ DNS query history. Impact is expo...

CVE-2021-33259: Missing Authentication for Critical Function

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-31228: Use of Insufficiently Random Values

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests without sniffing the specific request. Data is...

JavaLearnVulnerability

This is a Java vulnerability learning project repository, specifically focused on deserialization vulnerabilities. The repository contains a gadget called "URLDNS" which is used to verify if a target exists a deserialization vulnerability. The gadget is implemented using Java's built-in classes a...

Mongoose Web Server <= 6.8 Multiple Vulnerabilities

Mongoose Web Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Advisory ROSA-SA-2021-1811

Software: c-ares 1.10.0 OS: Cobalt 7.9 CVE-ID: CVE-2016-5180 CVE-Crit: CRITICAL CVE-DESC: Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-range entry or possibly execute arbitrary code via a hostnam...