PT-2020-15718

Name of the Vulnerable Software and Affected Versions Freebox versions prior to 1.5.29 Freebox Server versions prior to 4.2.3 Description A DNS rebinding issue affects the UPnP IGD implementations. Recommendations For Freebox versions prior to 1.5.29, update to version 1.5.29 or later. For Freebo...

CVE-2020-24376: Improper Input Validation

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

CVE-2020-24374: Improper Input Validation

A DNS rebinding vulnerability in Freebox v5 before 1.5.29...

CVE-2020-24377: Improper Input Validation

A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...

Man-in-the-Middle (MitM)

activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...

PT-2020-13781

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.15.12 Description The issue allows an attacker to connect to the JMX RMI registry without authentication and rebind the jmxrmi entry. By creating a proxy server, an attacker can intercept user credentials...

CVE-2019-15312

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an...

Command injection

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an...

CVE-2019-15312

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an...

CVE-2019-15312

Affected software: Zolo Halo devices running Linkplay firmware. Vulnerability: DNS rebinding combined with multiple /httpapi.asp endpoint command-execution issues could allow remote compromise from the Internet. Root cause: DNS rebinding exposure enabling exploitation of endpoint commands. Impact...

PT-2020-9686

Name of the Vulnerable Software and Affected Versions Zolo Halo devices via the Linkplay firmware affected versions not specified Description An issue was discovered that allows a DNS rebinding attack on the device. This attack, combined with command-execution security issues via the "/httpapi.as...

CVE-2019-15312: Undefined Security Weakness

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an...

The vulnerability of the BIND DNS server’s forwarding directive configuration allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the Forwarders directive configuration of the DNS BIND server is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to carry out a DNS Rebinding type attack...

CSRF and DNS Rebinding in Oasis

Impact What kind of vulnerability is it? Who is impacted? If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. There is no evidence that...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.18-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: DNS rebinding protection was ineffective wh...

CVE-2020-11003

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

Cross site request forgery (csrf)

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003 CSRF and DNS Rebinding in Oasis

Oasis before version 2.15.0 has a potential DNS rebinding or CSRF vulnerability. If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. Thi...

CVE-2020-11003

The CVE-2020-11003 entry concerns the Oasis open-source application. Affected software is Oasis before version 2.15.0, where a DNS rebinding and CSRF vulnerability exists that can allow an attacker to read/write to vulnerable applications when a user is tricked into visiting a malicious site. The...