Linux Distros Unpatched Vulnerability : CVE-2020-25685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded que...

Linux Distros Unpatched Vulnerability : CVE-2020-13250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...

Linux Distros Unpatched Vulnerability : CVE-2019-19794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The...

WordPress WPExperts Post SMTP plugin authentication bypass vulnerability

WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...

Malicious code in acme-dns-01-lightsail (npm)

The package acme-dns-01-lightsail was found to contain malicious code...

MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)

The package acme-dns-01-lightsail was found to contain malicious code...

Malicious code in acme-dns-01-freedns (npm)

The package acme-dns-01-freedns was found to contain malicious code...

Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code...

MAL-2025-14007 Malicious code in acme-dns-01-freedns (npm)

The package acme-dns-01-freedns was found to contain malicious code...

MAL-2025-18544 Malicious code in dns-detect (npm)

The package dns-detect was found to contain malicious code...

MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code...

CVE-2025-20136 Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability

A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation NAT DNS inspection for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device t...

Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞

Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense are both products of Cisco, Inc.Cisco Secure Firewall Adaptive Cisco Secure Firewall Adaptive Security Appliance is an enterprise-class firewall software.Cisco Secure Firewall Threat Defense is an integrate...

PT-2025-33315 · Cisco · Cisco Secure Firewall Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software affected versions not specified Description: A vulnerability in the function that performs IPv4 and IPv6 Network Address...

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

Mubit Powered BLUE 870 操作系统命令注入漏洞

Mubit Powered BLUE 870 is a DNS server from Mubit Japan. An operating system command injection vulnerability exists in Mubit Powered BLUE 870 version 0.20130927 and earlier, which stems from OS command injection and could lead to arbitrary command execution...

Medium: ruby3.2

Issue Overview: The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv...

Linux Distros Unpatched Vulnerability : CVE-2023-4236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal da...

WordPress Plugin WPExperts Post SMTP 安全漏洞

WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...

Brave Android 1.81.131 Security Fixes

Added clickjacking protection on DDNS interstitials as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.66 — refer to Google Chrome advisories for inherited CVEs...