779 matches found
metasploit-bailiwicked_domain-fix
🚀 metasploit-bailiwickeddomain-fix Metasploit의bailiwickeddomain.rb에서 undefined method each 오류 수정 CVE-2008-1447 DNS 캐시 중독 모듈 🔎 문제 Metasploit을 사용하여 CVE-2008-1447 을 테스트하는 동안 원래 모듈이 다음 오류와 함께 충돌했습니다: root@kitploit: undefined method each for an instance of IPAddr NoMethodError 이는 코드가 배열 대신 IPAddr 객체에...
dnspooq
dnspooq DNSpooq PoC — отравление кэша dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Только для образовательных целей Требования Docker compose Docker Эксплойт Запуск контейнеров root@kitploit: $ docker-compose up -d Запуск exploit.py root@kitploit: $ docker-compose exec attacker bash...
BIND-9-Cache-Poisoning-PoC---CVE-2025-40778
BIND 9 Cache Poisoning PoC - CVE-2025-40778 Концептуальный обзор Эта уязвимость позволяет атакующему повредить DNS-кэш резолвера BIND, заставляя легитимных пользователей перенаправляться на вредоносные IP-адреса без их ведома. Основная логика атаки: Атака основана на эксплуатации доверия. Жертва...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.12 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.12 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
CVE-2026-80213
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104805)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104805 advisory. In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS...
EulerOS Virtualization 2.13.0 : dnsmasq (EulerOS-SA-2026-3210)
According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames
A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...
CVE-2026-50252
A flaw in Unbound's SOREUSEPORT implementation reduces UDP source port entropy by allowing attackers to map ports to specific worker threads. This enables DNS cache poisoning, potentially leading to traffic redirection or unauthorized information disclosure. Mitigation Disable the so-reuseport...
CVE-2026-50248
A flaw in Unbound allows a remote attacker to replace an authenticated or Response Policy Zone RPZ by spoofing DNS records for configured primary hostnames. This enables the attacker to impersonate the primary server, leading to DNS cache poisoning or traffic redirection. Mitigation Configure...
unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes
A flaw was found in Unbound. Insufficient validation of the RRSIG.Labels field, combined with premature cache writes during RFC 8198 aggressive NSEC processing, can lead to cache poisoning. This vulnerability allows a malicious actor, controlling a single delegated zone, to poison arbitrary sibli...
bind9.18 security update
An update is available for bind9.18. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Na...
GO-2026-4635 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache...
Oracle Linux 8 : bind9.16 (ELSA-2026-54509)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54509 advisory. - Fix NSEC3 signer validation CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix CVE-2026-11622: reference-counted DNS cac...
bind: bind9: Potential memory usage beyond configured limits
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...
