CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...

CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...

pGina 安全漏洞

pGina is an open source Windows authentication tool from the individual developer Hans Wurst. A security vulnerability exists in pGina version 3.9.9.12 and earlier, which stems from the HttpAuth plugin that can bypass authentication when DNS resolution is controlled...

CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...

PT-2025-21263 · Unknown · Pgina.Fork

Name of the Vulnerable Software and Affected Versions: pGina.Fork versions 3.9.9.12 and earlier Description: The issue allows authentication bypass when an adversary controls DNS resolution for pginaloginserver. This occurs due to a flaw in the HttpAuth plugin. Recommendations: For versions...

CVE-2025-48027

The CVE-2025-48027 entry concerns the HttpAuth plugin in pGina.Fork up to version 3.9.9.12. Affected component is the HttpAuth plugin used by pGina.Fork; root cause is authentication bypass when an adversary controls DNS resolution for pginaloginserver. Documents from multiple sources confirm the...

CVE-2025-47775

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

CVE-2025-47775 Bullfrog's DNS over TCP bypasses domain filtering

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

CVE-2025-47775

The CVE-2025-47775 refers to Bullfrog, a GitHub Action that blocks unauthorized outbound traffic in workflows. The issue: before version 0.8.4, Bullfrog’s TCP handling could bypass the intended block, enabling DNS data exfiltration and a sandbox bypass. Affected version range includes all release...

CVE-2025-47775 Bullfrog's DNS over TCP bypasses domain filtering

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

CVE-2025-47775 Bullfrog's DNS over TCP bypasses domain filtering

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue...

RHSA-2025:7094 Red Hat Security Advisory: aardvark-dns security update

Bulletin has no description...

Alibaba Cloud Linux 3 : 0067: bind (ALINUX3-SA-2024:0067)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0067 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-3094: Sending a flood of dynamic DNS updat...

Alibaba Cloud Linux 3 : 0054: dnsmasq (ALINUX3-SA-2023:0054)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0054 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-28450: An issue was discovered in Dnsmasq...

Alibaba Cloud Linux 3 : 0112: dnsmasq (ALINUX3-SA-2024:0112)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0112 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-3448: A flaw was found in dnsmasq...

PT-2025-21175 · Bullfrog · Bullfrog

Name of the Vulnerable Software and Affected Versions: Bullfrog versions prior to 0.8.4 Description: Bullfrog is a GitHub Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration, which can result in sandbox...

Alibaba Cloud Linux 3 : 0083: bind (ALINUX3-SA-2023:0083)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0083 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-2795: By flooding the target...

The vulnerability of the /goform/formSetDDNS function in D-Link DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formSetDDNS function in D-Link DIR-618 and DIR-605L router microprogramming systems is related to access control errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DNS Query Forgery: a Client-Side Defense against Mobile App Traffic Profiling

Mobile applications continuously generate DNS queries that can reveal sensitive user behavioral patterns even when communications are encrypted. This paper presents a privacy enhancement framework based on query forgery to protect users against profiling attempts that leverage these background...

Alibaba Cloud Linux 3 : 0071: dnsmasq (ALINUX3-SA-2024:0071)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0071 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-28450: An issue was discovered in Dnsmasq...