CVE-2025-40778

CVE-2025-40778 概念验证 通过附加记录注入演示 DNS 缓存投毒漏洞的教育性示例。 ⚠️ 免责声明 仅供教育目的使用 本工具仅用于教育和授权安全测试目的。未经授权将本工具用于您不拥有或未经明确许可测试的系统，属于违法行为且不道德。 作者对本工具被滥用或造成的损害不承担任何责任。 📋 描述 此 PoC 演示了受入侵的权威 DNS 服务器如何将投毒记录注入 DNS 响应，从而可能在用户不知情的情况下将用户重定向到恶意服务器。 攻击向量： 受入侵的权威名称服务器注入附加 DNS 记录 投毒记录被递归解析器缓存 查询合法域名的用户被重定向到攻击者控制的 IP...

PT-2026-97186

Name of the Vulnerable Software and Affected Versions Paymob for WooCommerce WordPress plugin versions prior to 4.1.14 Description The plugin fails to verify the request signature within the card-token branch of its payment webhook. This flaw allows unauthenticated attackers to enumerate register...

EUVD-2026-61217

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...

CVE-2026-54543 Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...

CVE-2026-13171

The Eventin (also referred to as WP Event Solution ) WordPress plugin, in versions prior to 4.1.20 , is vulnerable to an improper access control flaw. The plugin fails to perform an authorization check on its waiting-list registration handler . This allows unauthenticated users to successfully cr...

CVE-2026-13171: Improper Access Control

The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration handler, allowing unauthenticated users to create WordPress user accounts for arbitrary email addresses and inject order records...

CVE-2026-44943

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

CVE-2026-44943

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

EUVD-2026-50311

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

CVE-2026-44943

CVE-2026-44943 is a path traversal in open-iscsi up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e, allowing remote MITM attackers to create root-owned files outside the database and inject lines into the record. Affected product: open-iscsi. Root cause: improper limitation of a pathname to a...

Improper Handling of Length Parameter Inconsistency

Overview zeroconf is a Pure Python Multicast DNS Service Discovery Library Bonjour/Avahi compatible Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via the readcharacterstring and readstring functions. An attacker can inject malicious...

GHSA-37M5-M4Q3-FC6X Froxlor: BIND Zone File Injection via TXT Record Content

Summary The DomainZones.add API endpoint does not sanitize newline characters in TXT record content. An authenticated customer with DNS editing enabled can inject newlines into TXT record values, which break out of the record line in the generated BIND zone file. This enables injection of arbitra...

RHCOS 6 : Red Hat OpenShift Enterprise 1.1 update (Important) (RHSA-2013:0220)

The remote Red Hat Enterprise Linux CoreOS 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0220 advisory. - Origin: rhc-chk.rb password exposure in log files CVE-2012-5658 - Jenkins: HTTP response splitting CVE-2012-6072 - Jenkins: open...

CVE-2026-35519 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS host record configuration parameter dns.hostRecord. This vulnerability allows an...

EUVD-2021-30056

Malicious code in bioql PyPI...

CVE-2021-43105

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

CVE-2021-43105: Undefined Security Weakness

A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...

DNS Server Dynamic Update Record Injection

This module allows adding and/or deleting a record to any remote DNS server that allows unrestricted dynamic updates. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'dnsruby' class...