dns_amplification_scanner

DNS 放大 DDoS 检测与验证工具 该脚本旨在识别和验证可能被利用于 DNS 放大分布式拒绝服务（DDoS）攻击的潜在 DNS 服务器。它解决了 Nessus 等自动化漏洞扫描器的局限性，这些扫描器在使用插件 35450 检测此问题时可能会产生误报。 背景 DNS 放大攻击是一种基于反射的 DDoS 攻击，利用配置错误或开放的 DNS 解析器。攻击者发送带有伪造源 IP 地址的小型 DNS 查询，导致 DNS 服务器向受害者的 IP 地址发送大量响应。这会放大攻击流量，可能压垮目标的网络资源。 功能 该脚本执行以下关键功能： 1. 批量域名处理：高效分析多个域名以识别潜在漏洞。 2...

Mozilla Firefox ESR < 153.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-77 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox E...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100939 advisory. Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100942 advisory. Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101284 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Linux Distros Unpatched Vulnerability : CVE-2026-74296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Release the HWprovided UAR index rather than the SW one Free the UAR index returned by the hardware. CVE-2026-74296 Note that Nessus relies on the...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0096

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2024-27342

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-0503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a...

Linux Distros Unpatched Vulnerability : CVE-2015-4772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Serv...

CVE-2014-2848

A race condition in the wmimalwarescan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program...

Linux Distros Unpatched Vulnerability : CVE-2023-25434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes at /libtiff/tools/tiffcrop.c:3215. CVE-2023-25434 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-1769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. CVE-2022-1769 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2021-43331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. CVE-2021-43331 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-49599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Fix data-races around sysctltcpl3mdevaccept. While reading sysctltcpl3mdevaccept, it can be changed concurrently. Thus, we need to add READONCE to its...

Linux Distros Unpatched Vulnerability : CVE-2023-37453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in...

Linux Distros Unpatched Vulnerability : CVE-2017-1000231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. CVE-2017-1000231 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2015-4104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service unexpected...

Linux Distros Unpatched Vulnerability : CVE-2017-9166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11. CVE-2017-9166 Note that Nessus relies on the...