26 matches found
DEBIAN-CVE-2026-83813
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...
CVE-2026-83813
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...
PT-2026-122230
Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.10.0rc1 Description In the twisted.names.dns.DNSDatagramProtocol, the system accepts UDP DNS responses for pending queries based solely on a matching 16-bit transaction ID without verifying the source host and port...
Python DNS Reverse Shell
Poll DNS TXT records for commands and exfil output via result queries stdlib UDP DNS — no dnspython required on target. Pairs with listeners/covert/dns. from kittysploit import from lib.c2.dnsreverseagent import buildpythondnsagentscript class ModulePayload: """DNS TXT polling agent — deliverable...
PowerShell DNS Reverse Shell
Poll DNS TXT for commands and exfil output via result subdomain queries raw UDP DNS — custom nameserver IP:port. Pairs with listeners/covert/dns. from kittysploit import import base64 from lib.c2.dnsreverseagent import buildpowershelldnsagentscript class ModulePayload: """PowerShell DNS TXT polli...
CVE-2026-47703 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle
AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...
CVE-2026-48497: Use of Incorrect Operator
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS filter is configured with local resolution containing a name with the length of 255 octets or remote resolution for a name of 255 octets long...
CVE-2025-71058: Improper Control of Generation of Code
Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server. The implementation matches responses primarily by TXID and inserts results into the cache, enabling a remote attacker to inje...
CVE-2012-0206
commonstartup.cc in PowerDNS aka pdns Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service packet loop via a crafted UDP DNS response...
PowerDNS Information Disclosure
The vulnerability in commonstartup.cc of PowerDNS referred to as pdns allows malicious actors operating remotely to cause service failures packet loss by using specially crafted UDP DNS responses...
Null pointer dereference
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
CVE-2016-0742
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
CVE-2016-0742
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
CVE-2016-0742
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
CVE-2016-0742: NULL Pointer Dereference
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
PT-2016-1408
Name of the Vulnerable Software and Affected Versions nginx versions 1.8.0 through 1.8.1 nginx versions 1.9.x through 1.9.10 Description The issue in the resolver of nginx allows remote attackers to cause a denial of service, resulting in an invalid pointer dereference and worker process crash, v...
mDNS Query
This module sends mDNS queries, which are really just normal UDP DNS queries done usually over multicast on a different port, 5353. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'mDNS Query',...
LLMNR Query
This module sends LLMNR queries, which are really just normal UDP DNS queries done usually over multicast on a different port, 5355. Targets other than the default RHOSTS' 224.0.0.252 should not respond but may anyway. This module requires Metasploit: https://metasploit.com/download Current sourc...
CVE-2012-0206
commonstartup.cc in PowerDNS aka pdns Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service packet loop via a crafted UDP DNS response...
CVE-2012-0206
commonstartup.cc in PowerDNS aka pdns Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service packet loop via a crafted UDP DNS response...