23595 matches found
hakrevdns
hakrevdns Strumento piccolo, veloce e semplice per eseguire lookup DNS inversi in massa. Gli fornisci indirizzi IP e restituisce nomi host. Può essere un modo utile per trovare domini e sottodomini appartenenti a un'azienda a partire dai loro indirizzi IP. Installazione root@kitploit: go install...
AdGuardHome
Centro di protezione della privacy per te e i tuoi dispositivi Server DNS gratuito e open source, potente, per bloccare annunci e tracker su tutta la rete. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home è un software a livello di rete per bloccare annunci e tracciamento. Dopo averl...
FreeBSD : jackson-databind -- multiple vulnerabilities (0cb401f9-9f19-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0cb401f9-9f19-11f1-a655-3497f65b111b advisory. The Jackson project reports: PolymorphicTypeValidator needs to validate generic type parameter...
tldfinder
TLDFinder Funzionalità • Installazione • Utilizzo • Esecuzione di tldfinder • Unisciti a Discord Uno strumento semplificato per scoprire TLD privati per la ricerca sulla sicurezza. Funzionalità Lookup DNS basati su TLD Passivi Lookup DNS basati su TLD Attivi Output su STD IN/OUT e in formato...
nextdns
NextDNS CLI-Client NextDNS CLI ist ein Kommandozeilenwerkzeug, mit dem du den DNS-over-HTTPS-Dienst DoH von NextDNS mit erweiterten Funktionen nutzen kannst. Obwohl die fortschrittlichsten Funktionen nur mit NextDNS funktionieren, kann dieses Programm als Client für jeden DoH-Anbieter oder eine...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
BIND-9-Cache-Poisoning-PoC---CVE-2025-40778
PoC de Envenenamento de Cache no BIND 9 - CVE-2025-40778 Visão Geral Conceitual Esta vulnerabilidade permite que um atacante corrompa o cache DNS de um resolvedor BIND, forçando usuários legítimos a serem redirecionados para endereços IP maliciosos sem que eles saibam. A lógica central do ataque:...
ecs_checker
Strumento di rilevamento remoto EDNS Client Subnet ECS - CVE-2025-40766 Questo strumento verifica se un resolver DNS remoto supporta EDNS Client Subnet ECS — un'estensione DNS che potrebbe esporre i sistemi a vulnerabilità di avvelenamento della cache o di perdita di informazioni come...
decode-spam-headers
decode-spam-headers.py Ob Sie versuchen zu verstehen, warum eine bestimmte E-Mail für Ihre täglichen administrativen Aufgaben im SPAM-/Junk-Ordner gelandet ist, oder für Ihre Red-Team-Phishing-Simulationszwecke – dieses Skript hilft Ihnen dabei! Die Idee entstand während der Durchführung einer...
CVE-2026-63311
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...
CVE-2026-63310
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...
CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...
CVE-2026-63311
NLTK (Python NLP library) versions
EUVD-2026-64334
NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...
CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
EUVD-2026-64335
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
CVE-2026-63310
NLTK (Natural Language Toolkit) versions before 3.9.3 contain a missing post-download integrity verification flaw in the downloader module . After downloading packages, the module fails to validate file integrity before extraction. An attacker positioned for a man-in-the-middle attack or performi...
CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...