615 matches found
CVE-2026-75490
The Cudy TR3000 router, running firmware versions prior to 2.5.42 , is susceptible to an unauthenticated remote code execution (RCE) vulnerability. An attacker on the upstream Ethernet segment can advertise rogue _cudycmagent._tcp records via mDNS to point to a malicious MQTT broker. By sending c...
whosthere
Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...
spycast
SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets. Building cargo build --release OS specific bundle packages for example dmg and app bundles on OSX can be built via: car...
Responder
Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...
AirBorne-PoC
AirBorne PoC Framework – Elite RCE Edition Full PoC Framework for CVE-2025-24252 & CVE-2025-24132 By ekomsSavior | AirBorne is a combined proof-of-concept PoC framework targeting two serious vulnerabilities in Apple's AirPlay service. It includes a full crash trigger and a working reverse shell...
VindicateTool
Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...
CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write
CVE-2025-5688 – FreeRTOS-Plus-TCP Out-of-Bounds Write Exploit Remote memory corruption / DoS / potential RCE trigger in FreeRTOS-Plus-TCP when processing overly long DNS names in LLMNR or mDNS queries Buffer Allocation Scheme 1. Exploit Author: Mohammed Idrees Banyamer Country: Jordan Instagram:...
Sapito
Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...
CVE-2025-24132-Scanner
EN | KR 📄 Overview This tool discovers AirPlay-capable devices on your local network via mDNS Zeroconf and tests them for the CVE-2025-24132 “zero-click” HTTP RCE vulnerability. Discovered devices are listed in a simple GUI; click a device to view all retrieved properties. Prerequisites Python 3....
krbrelayx
Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3, ldap3-ad-auth and dnspython to function. Requirements can be installed with pip install -r requirements.txt More info about this toolkit available in my blog...
Responder
⛔ DEPRECATED Active at https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Author: Laurent Gaffie http://www.spiderlabs.com Intro Responder an LLMNR, NBT-NS and MDNS poisoner. It will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see:...
CVE-2026-64860
A flaw was found in the mdns component. This flaw allows an unauthenticated attacker on the same local network to cause a Denial of Service DoS by sending specially crafted multicast DNS mDNS packets. Because the component parses domain name compression pointers recursively without enforcing a...
EUVD-2026-117493
ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...
CVE-2026-64860
The mdns component in ESP-Protocols (prior to version 1.11.2) is vulnerable to uncontrolled recursion when parsing fully qualified domain names (FQDNs) in inbound mDNS packets. Specifically, the mdns_utils_read_fqdn() function fails to cap pointer-follow depth during DNS name-compression, allowin...
CVE-2026-64860 espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression
ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...
CVE-2026-92208_remote_mDNS_overflow
CVE-2026-92208 A heap-based buffer overflow vulnerability in the mDNS component of NoMachine allows possibly unauthenticated, network-adjacent attackers to execute arbitrary code in the context of the service account. Note: ZDI holds exclusivity rights over the technical details, so no PoC or...
CLEANSTART-2024-BD40398 Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak
CVE-2020-26966 affects multiple packages. Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. See references for individual vulnerability details...
CLEANSTART-2024-GR84577 Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak
CVE-2020-26966 affects multiple packages. Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. See references for individual vulnerability details...
CVE-2026-64860 espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression
ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...
CVE-2026-64860
ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...