3198 matches found
PT-2025-17680 · Unknown · Picklescan
Name of the Vulnerable Software and Affected Versions: Picklescan version 0.0.24 and earlier Description: The issue arises from the unsafe globals in Picklescan not including ssl, allowing ssl.get server certificate to exfiltrate data via DNS after deserialization. Recommendations: For Picklescan...
CVE-2025-2243
A server-side request forgery SSRF vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue...
PT-2025-14873 · Bitdefender · Bitdefender Gravityzone Console
Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Console versions prior to 6.41.2.1 Description: A server-side request forgery SSRF issue allows an attacker to bypass input validation logic using leading characters in DNS requests. This could potentially be used for...
MAL-2025-191706 Malicious code in conn-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 25be0eaa51dd4c4ba03afd81b4cfad938ceb07dacb0195a9179b46413178e086 Already during the installation, the file with slightly obfuscated code is loaded and starts exfiltrating information about the host. It especially targets...
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims' DNS Email Records
Cybersecurity researchers have shed light on a new phishing-as-a-service PhaaS platform that leverages the Domain Name System DNS mail exchange MX records to serve fake login pages that impersonate about 114 brands. DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishi...
Silicon Gecko OS 安全漏洞
Silicon Gecko OS is a highly optimized and feature-rich IoT operating system from Silicon. A security vulnerability exists in Silicon Gecko OS, which stems from an infinite loop in DNS response processing that could lead to a denial of service...
Security update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce bsc1237335: CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
The `trust-dns` project has been rebranded to `hickory-dns`
The trust-dns-proto crate is now available as hickory-proto...
CLSA-2025-1742722852 openssh: Fix of CVE-2025-26465
CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled...
RLSA-2025:1681 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
The vulnerability of the Windows operating system’s DNS service allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS service is related to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-24064
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
IBM Control Center 安全漏洞
IBM Control Center is a centralized monitoring and management system from International Business Machines IBM. An input validation error vulnerability exists in IBM Control Center versions 6.2.1 through 6.3.1, which stems from improper user input validation, and can be exploited by an attacker to...
Security update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce bsc1237335: CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
CVE-2024-55064
Multiple cross-site scripting XSS vulnerabilities in EasyVirt DC NetScope = 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the 1 smtpserver, 2 smtpaccount, 3 smtppassword, or 4 emailrecipients parameter to /smtp/update; the 5 ntp or 6 dns parameter to...
RLSA-2025:1676 Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
PT-2025-7816 · Zephyrproject Rtos +1 · Zephyr
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash denial of service or an incorrect computation. Recommendations: At the moment, the...
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
...
bind: bind9: Many records in the additional section cause CPU exhaustion
A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an...