CVE-2026-41096

CVE-2026-41096 - क्रैश PoC DnsRawTruncateMessageForUdp dnsapi.dll में हीप ओवरफ़्लो। एक निर्मित DNS प्रतिक्रिया जिसमें QDCOUNT=0 और एक बड़ा OPT रिकॉर्ड है, जब ट्रंकेशन तर्क गंतव्य पॉइंटर की गलत गणना करता है तो 604-बाइट का हीप ओवरफ़्लो होता है। MSRC सलाह:...

CVE-2026-41096-POC

the bug is at DnsQueryRaw function to be specific, inside DnsRawTruncateMessageForUdp so you need a program to call it. I could be wrong, but currently there isnt a service or default program in windows 11 that use this function, thats why i needed client.c. this repo has 2 files, client.c and...

CVE-2025-2243 SSRF in GravityZone Console via DNS Truncation (VA-12634)

A server-side request forgery SSRF vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue...