Important: Red Hat Security Advisory: perl-Net-DNS security update

An update for perl-Net-DNS is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2021-24086

CVE-2021-24086 这是针对 CVE-2021-24086（“Windows TCP/IP 拒绝服务漏洞”）的概念验证代码，该漏洞是 tcpip.sys 中的一个空指针解引用，微软于 2021 年 2 月修补。根据这条 推文，该漏洞由 @piazzt 发现。它可以通过发送恶意的 IPv6 UDP 数据包远程触发。 你可以在此阅读微软的博客：影响 TCP/IP 的多项安全更新：CVE-2021-24074、CVE-2021-24094 和 CVE-2021-24086。该博客简要讨论了影响和缓解/规避措施。 关于根本原因的更深入讨论可在 doar-e.github.io...

CVE-2020-1350

警告 此仓库已归档，不再积极维护。 CVE-2020-1350 此 PowerShell 脚本用于检查您的服务器是否受到 Windows DNS 服务中 CVE-2020-1350 远程代码执行漏洞的影响。 此临时修复脚本支持的操作系统 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 注意：脚本在 Windows Server 2008 和 Windows Server 2008 R2 上不受支持（未测试）。这些操作系统已生命周期终止。 KB4569509：针对 DNS...

CVE-2025-46171

vBulletin 3.x.x - 通过好友列表过载导致的拒绝服务攻击 摘要 /misc.php?do=buddylist 端点执行一个单一的、大型 JOIN 查询，该查询检索所有好友及其用户和会话信息，以检查在线状态。由于该查询没有分页或结果限制地处理整个好友列表，因此当列表增大时，它会变得极其消耗资源，并可能使数据库过载。 此问题易于利用，且设置要求最低。除了基本用户帐户之外，不需要任何特殊权限。只需膨胀好友列表，就足以给数据库带来严重压力。 受影响版本 ✅ 确认存在漏洞 : vBulletin 3.8.7 技术细节 此 SQL...

EulerOS Virtualization 2.11.0 : bzip2 (EulerOS-SA-2026-3492)

According to the versions of the bzip2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

EulerOS Virtualization 2.11.1 : python-ecdsa (EulerOS-SA-2026-3458)

According to the versions of the python-ecdsa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Cur...

EulerOS Virtualization 2.11.1 : libtasn1 (EulerOS-SA-2026-3435)

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a...

The vulnerability of the fromSetIpMacBind() function in Tenda A21 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpMacBind function in Tenda A21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the /etc_ro/shadow file in the Tenda i24 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the /etcro/shadow file in the Tenda i24 wireless access point software lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the fromNatStaticSetting function (/goform/NatStaticSetting) in the Tenda CX12L Wi-Fi router software allows a intruder to trigger a service failure.

The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the Skype for Business Server’s instant messaging program, related to a countable loss of significance, allows a perpetrator to trigger a service failure.

The vulnerability of the Skype for Business Server’s instant messaging program is related to a countable loss of significance. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EulerOS Virtualization 2.12.1 : bzip2 (EulerOS-SA-2026-3577)

According to the versions of the bzip2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

ROS-20260918-73-0102

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0100

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0108

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0109

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0096

The vulnerability in the kernel-lt is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS Virtualization 2.12.1 : mod_http2 (EulerOS-SA-2026-3598)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...

EulerOS Virtualization 2.12.1 : libarchive (EulerOS-SA-2026-3592)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the...

The vulnerability of the Kerberos Key Distribution Center (KDC) component of Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Kerberos Key Distribution Center KDC component in Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...