cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

Security Bulletin: IBM Storage Protect Server is affected by an improper domain name validation vulnerability (CVE-2026-42579).

Summary IBM Storage Protect Server uses the netty-codec-dns library in certain components. A vulnerability in netty could allow improper handling of domain names that do not comply with RFC 1035 constraints. An attacker can exploit this through malicious DNS responses or specially crafted...

Windows Domain Name Service Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85903: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96113: Windows Domain Name Service Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88116: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83642: Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

[SECURITY] Fedora 45 Update: ocaml-domain-name-0.5.0-4.fc45

A domain name is a sequence of labels separated by dots, such as foo.example . Each label may contain any bytes. The length of each label may not exceed 63 charactes. The total length of a domain name is limited to 253 byte representation is 255, but other protocols such as SMTP may apply even...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

Astra Linux – Vulnerability in OpenSSH

A vulnerability was discovered in OpenSSH when the VerifyHostKeyDNS option is enabled. A man-in-the-middle attack can be carried out by a malicious machine pretending to be a legitimate server. This issue arises due to the way OpenSSH handles error codes under certain conditions during the...

Astra Linux – Vulnerability in Golang-1.15

Avoid versions before 1.15.13 and 1.16.x, as well as those before 1.16.5, which have functions for DNS lookups that do not validate the responses from DNS servers. As a result, a return value might contain an unsafe injection e.g., XSS, which does not conform to the RFC1035 format...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed a memory leak in cifsconstructtcon When using a multiuser mount with domain= specified and cifscreds, cifssetcifscreds will set @ctx-domainname, so it needs to be freed before leaving cifsconstructtcon. This...

ROOT-APP-MAVEN-CVE-2026-47691 CVE-2026-47691 in io.netty:netty-resolver-dns - Patched by Root

Root has patched CVE-2026-47691 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...

Internationalized Domain Name Validation

Nodemailer is vulnerable to an internationalized domain name validation/bypass. The vulnerability is due to inconsistent Punycode A-label generation, which allows an attacker to craft recipient addresses containing invisible characters or compatibility mappings to bypass domain allow-list checks...

Linux Distros Unpatched Vulnerability : CVE-2026-100891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library...