2079 matches found
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
Report Description: https://vulners.com/cve/CVE-2021-44228 Impact Probably arbitrary code execution System Hosts ███████ Affected Products and Versions CVE Numbers CVE-2021-44228 Steps to Reproduce 1. Browse to https://██████████/█████████https%3A%2F%2F███%2F 2. Enter a...
ROS-2-445
2.445 Vulnerability in BIND DNS server 1. Vulnerability description: Security issue is related to inefficiency of protection against "DNS rebinding" attacks when operating in the DNS server redirecting requests mode block "forwarders" in the settings.Identifier of the Information Security Threats...
The vulnerability of the dnsc_load_local_data function in the DNS server Unbound allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the dnscloadlocaldata function in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
Updated bind packages fix security vulnerability
Updated bind packages fix security vulnerability: Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker to significantly degrade resolver performance, resulting in denial of service large delays for responses for client...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
nse-log4shell Nmap NSE scripts to check against log4shell or...
U.S. Dept Of Defense: ██████████ running a vulnerable log4j
Description: https://vulners.com/cve/CVE-2021-44228 Impact Probably arbitrary code execution System Hosts ████████ Affected Products and Versions CVE Numbers CVE-2021-44228 Steps to Reproduce 1. Browse to https://████████/███████https%3A%2F%2F█████████%2F 2. Enter a...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Northwave Log4j CVE-2021-44228 checker Friday 10 December 202...
The vulnerability of the ALIGN_UP macro in the Unbound DNS server allows a attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ALIGNUP macro in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...
DNS Recursion Enabled (UDP) - Active Check
The DNS server has recursion enabled. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
Clash - A Rule-Based Tunnel In Go
A rule-based tunnel in Go. Features Local HTTP/HTTPS/SOCKS server with authentication support VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP. Rules based off...
[SECURITY] Fedora 33 Update: bind-9.11.36-1.fc33
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
Clash - A Rule-Based Tunnel In Go
Clash A rule-based tunnel in Go. Features Local HTTP/HTTPS/SOCKS server with authentication support VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP. Rules based o...
EulerOS 2.0 SP3 : nginx (EulerOS-SA-2021-2599)
According to the versions of the nginx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that cause...
Security News: Microsoft Patch Tuesday October 2021, Autodiscover, MysterySnail, Exchange, DNS, Apache, HAProxy, VMware vCenter, Moodle
Hello everyone! This episode will be about relatively recent critical vulnerabilities. Lets start with Microsoft Patch Tuesday for October 2021. Specifically, with the vulnerability that I expected there, but it didnt get there. Autodiscover leak discovered by Guardicore Labs "Autodiscover, a...
CVE-2021-40469
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-40469
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-40469
Windows DNS Server Remote Code Execution Vulnerability...
Remote code execution
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-40469
CVE-2021-40469 is a Windows DNS Server Remote Code Execution vulnerability. Connected sources indicate exploitation requires a privileged user account and is network-exploitable with low attack complexity, but exploitation in the wild is not strongly evidenced: the issue was noted as exploitable ...
