23722 matches found
CVE-2026-80213
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was written unchanged, and thus the bytes on t...
EUVD-2026-67139
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was written unchanged, and thus the bytes on t...
CVE-2026-80212
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...
EUVD-2026-67138
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...
CVE-2026-80212
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...
CVE-2026-80212
CVE-2026-80212 is a memory exhaustion vulnerability in the resolv gem before 0.7.2 for Ruby. The root cause is that Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create permanently register a new class for every unknown DNS resource rec...
CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write
CVE-2025-5688 – Exploit di scrittura fuori dai limiti in FreeRTOS-Plus-TCP Corruzione di memoria remota / DoS / potenziale attivazione di RCE in FreeRTOS-Plus-TCP durante l'elaborazione di nomi DNS eccessivamente lunghi nelle query LLMNR o mDNS Buffer Allocation Scheme 1. Autore dell'exploit:...
CVE-2020-8277
CVE-2020-8277 Solo per scopi educativi. Esecuzione rapida root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" versio...
Malicious code in ekx-report-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...
MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...
domain-protect
domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...
CVE-2026-63387
A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the dnsnametolabels function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the...
CVE-2026-26128
CVE-2026-26128 विंडोज एक्टिव डायरेक्ट्री में यूनिकोड नॉर्मलाइज़ेशन के माध्यम से केरबेरोस रिफ्लेक्शन का शोषण करने के लिए पायथन टूल। Guillaume André / Synacktiv द्वारा शोध पर आधारित। इंस्टॉलेशन ये टूल केवल Python 3.8+ के साथ संगत हैं। GitHub से रिपॉजिटरी क्लोन करें, निर्भरताएँ इंस्टॉल करें और आप...
CVE-2026-63311
A flaw was found in NLTK. This server-side request forgery SSRF vulnerability allows an attacker to bypass network access restrictions. By triggering DNS resolution failures or using DNS rebinding, an attacker can cause the validatenetworkurl function to incorrectly validate URLs. This enables...
CVE-2025-40778
CVE-2025-40778 إثبات المفهوم عرض تعليمي لثغرة تسميم ذاكرة التخزين المؤقت لنظام DNS عبر حقن سجلات إضافية. ⚠️ إخلاء مسؤولية لأغراض تعليمية فقط هذه الأداة مقدمة لأغراض تعليمية واختبارات أمنية مصرح بها فقط. الاستخدام غير المصرح به لهذه الأداة ضد أنظمة لا تملكها أو ليس لديك إذن صريح لاختبارها هو أمر غي...
NoPacScan
NoPacScan NoPacScan ist ein Scanner für CVE-2021-42287/CVE-2021-42278, der mehr Domänencontroller erkennt als das ursprüngliche Skript und dabei genauer arbeitet. Er scannt DCs über die DNS-Suche msdcs.aaa.com, was besser ist als LDAP und SAMR, und scannt automatisch alle gefundenen DCs. Wenn Sie...
CVE-2026-35517
CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution durch Newline-Injection TL;DR Eine Remote Code Execution -Schwachstelle in der FTLDNS-Engine von Pi-hole Versionen 6.0 bis 6.5 ermöglicht es einem authentifizierten Angreifer, beliebige dnsmasq-Konfigurationsdirektiven zu injizieren, indem...
log4j
log4j-detect Semplice script Python 3 per rilevare la vulnerabilità della libreria Java "Log4j" CVE-2021-44228 per un elenco di URL con multithreading Questo script è basato su takito1812/log4j-detect Di ExodataCyberdefense Lo script "log4j-detect.py" sviluppato in Python 3 è responsabile del...
CVE-2023-51073
CVE-2023-51073 - Schwachstelle in der Firmware-Update-Server-Verifizierung beim Buffalo LS210D Version 1.78-0.03 Christopher J. Pace und Ryan Miller Der Buffalo LS210D ist ein Network Attached Storage NAS-Server, der für kleine Unternehmen und Privatpersonen entwickelt und vermarktet wird. Der...
CVE-2026-27831-POC
CVE-2026-27831-POC PoC Exploit per CVE-2026-27831 Questo è un proof of concept exploit per la lettura out-of-bounds basata su heap remota in rldns versione 1.3 che causa denial of service. rldns è un server DNS open source per linux, freebsd e netbsd, eseguito su architettura x8664. Rldns Version...