JudasDNS

Judas DNS root@kitploit: ,, 7MMF' 7MM 7MM"""Yb. 7MN. 7MF'.M"""bgd MM MM MM Yb. MMN. M ,MI "Y MM 7MM 7MM ,M""bMM ,6"Yb. ,pP"Ybd MM Mb M YMb M MMb. MM MM MM ,AP MM 8 MM 8I " MM MM M MN. M YMMNq. MM MM MM 8MI MM ,pm9MM YMMMa. MM ,MP M MM.M . MM O MM MM MM Mb MM 8M MM L. I8 MM ,dP' M YMM Mb dM Ymmm9...

CVE-2015-7547

このコードは現状のまま提供されています。お客様は、本コードによって生じるいかなるリスクからも、ご自身、ご自身の財産およびデータ、そして他者を保護する責任を負います。本 コードは、お客様のマシン上で予期しない望ましくない動作を引き起こす可能性があります。 本コードはお客様のシステム上の脆弱性を検出しない可能性があります。 このPOCはサーバーコードとクライアントコードの2つのコンポーネントで構成されていることに注意してください。 サーバーコードは脆弱性をトリガーするため、クライアントコードをクラッシュさせます。...

dns-zone-transfer-test

DNSゾーン転送テスト ドメインネームシステム（DNS）ゾーン転送テストを自動化します。 指定されたドメインのネームサーバーを自動的に検出し、ゾーン転送のテストを実行します。成功した場合、特定されたAレコードが標準出力に表示されます。 使用方法 root@kitploit: dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1 zonetransfer.me 要件 root@kitploit: git = 2.36.0 python = 3.9 pip = 20.3.4 システムインストールなしでの使用...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Apache RocketMQ 任意文件写入漏洞利用演示 概述 事实上，Apache RocketMQ 中的任意文件写入漏洞（CVE-2023-37582）已在 CVE-2023-33246 RCE 漏洞中得到解决。 然而，针对 CVE-2023-33246 RCE 提供的修复并不全面，因为它仅解决了对 RocketMQ broker 的影响。 该漏洞影响 RocketMQ 的 nameserver，利用该漏洞可实现任意文件写入。 通过 Docker 搭建本地 RocketMQ 环境 root@kitploit: start name serv...

Astra Linux – Vulnerability in unbound

NLnet Labs Unbound, including version 1.16.1, is vulnerable to a new type of “ghost domain name” attack. The vulnerability operates by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain,...

Astra Linux – Vulnerability in unbound

NLnet Labs Unbound, including version 1.16.1, is vulnerable to a new type of “ghost domain names” attack. The vulnerability operates by targeting an Unbound instance. When the cached delegation information is about to expire, Unbound queries for a rogue domain name. The rogue nameserver delays th...

Security update for bind

This update for bind fixes the following issues: CVE-2022-3094: UPDATE message flood may cause named to exhaust all available memory bsc1207471. CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: amplification vulnerabilities via self-pointed...

unbound: Unbound: Cache manipulation via 'ghost domain names' attack

A flaw was found in NLnet Labs Unbound. A remote attacker, by controlling a malicious domain a "ghost zone" and querying a vulnerable Unbound server, could exploit a vulnerability related to "ghost domain names" attacks. This could allow the attacker to overwrite cached Name Server NS records,...

[SECURITY] Fedora 43 Update: pdns-5.0.6-1.fc43

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

[SECURITY] Fedora 44 Update: pdns-5.0.6-1.fc44

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

Netty has Insufficient Bailiwick Validation for NS Records

Summary Netty's DnsResolveContext insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name server for a subdomain can poison the cache for parent domains like .co.uk. Details In...

[SECURITY] Fedora 43 Update: pdns-5.0.5-1.fc43

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

[SECURITY] Fedora 44 Update: pdns-5.0.5-1.fc44

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

SUSE CVE-2026-46038

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...

CVE-2026-46003

A flaw was found in the Linux kernel's qrtr nameserver. A malicious client can exploit this vulnerability by registering an excessive number of random nodes. This uncontrolled resource consumption leads to memory exhaustion, resulting in a Denial of Service DoS for the system...

CVE-2026-46026

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router nameserver. A malicious local client can exploit this by sending an unbounded number of NEWLOOKUP messages. This can lead to resource exhaustion, causing a Denial of Service DoS for the system. The vulnerability is addressed by...

CVE-2026-46038

A flaw was found in the Linux kernel's qrtr nameserver component. When a node sends a BYE packet, the nameserver fails to free the associated node memory, leading to a memory leak. This vulnerability can result in resource exhaustion over time, potentially impacting system stability and...

CVE-2026-46038

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...

UBUNTU-CVE-2026-46038

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...