cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

Astra Linux – Vulnerability in OpenSSH

A vulnerability was discovered in OpenSSH when the VerifyHostKeyDNS option is enabled. A man-in-the-middle attack can be carried out by a malicious machine pretending to be a legitimate server. This issue arises due to the way OpenSSH handles error codes under certain conditions during the...

Astra Linux - vulnerability in connman

An issue was found in the DNS proxy within Connman up to version 1.40. The implementation of the TCP server’s reply handling fails to verify whether there is sufficient header data, resulting in an out-of-bounds read...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifsconstructtcon When performing a multiuser mount with domain= specified and using cifscreds, cifssetcifscreds ends up setting @ctx-domainname; therefore, this value must be freed prior to exitin...

Astra Linux – vulnerability in Zabbix

The vulnerability arises from improper checks; specifically, it fails to verify whether RDLENGTH overflows the buffer in responses from DNS servers...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. Chromium security severity: Low...

Astra Linux – vulnerability in golang-1.15

Versions prior to 1.15.13 and 1.16.x prior to 1.16.5 include functions for DNS lookups that do not validate responses from DNS servers. As a result, a return value may contain unsafe injections e.g., XSS, which do not conform to the RFC1035 format...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes; however, there is a problem when this limit is actually reached: kafs attempts to create a directory under /proc/net/afs/...

Security Bulletin: IBM Storage Protect Server is affected by an improper domain name validation vulnerability (CVE-2026-42579).

Summary IBM Storage Protect Server uses the netty-codec-dns library in certain components. A vulnerability in netty could allow improper handling of domain names that do not comply with RFC 1035 constraints. An attacker can exploit this through malicious DNS responses or specially crafted...

Windows Domain Name Service Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Domain Name Service Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96113: Windows Domain Name Service Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88116: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85903: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83642: Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...