wirehole

이게 무엇인가요? WireHole은 WireGuard, PiHole 및 Unbound를 결합하여 배포 및 관리가 쉬운 전체 또는 분할 터널 VPN을 생성하는 docker-compose 프로젝트입니다. 이 설정은 PiHole을 통한 광고 차단 및 Unbound를 통한 향상된 DNS 개인정보 보호 및 캐싱 기능을 갖춘 VPN을 제공합니다. 저자 👤 Devin Stokes 트위터: @DevinStokes GitHub: @IAmStoxe 🤝 기여하기 기여, 이슈 및 기능 요청은 언제나 환영합니다! 이슈 페이지를 확인해보세요. 지지...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an out-of-bounds write operation through a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Astra Linux – Vulnerability in unbound

Unbound before version 1.9.5 allows for an integer overflow in the regional allocator through regionalalloc. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be exploited remotely or locally...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an integer overflow in the regional allocator through the ALIGNUP macro. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

CVE-2023-50387

Repositorio basado en https://github.com/knqyf263/CVE-2023-50387 en el que se hicieron varias modificaciones: Añadido resolver-fixed, que tiene una implementación de Unbound en la que se arregla la vulnerabilidad de la que hablamos. Creados scripts para la automatización de generación de claves...

dns-honeypot

DNSハニーポットを運用した最初の24時間 観測可能性ツールに日々没頭しているエンジニアとして、たまにどうしても試したくなるアイデアが浮かびます。これもそうした実験の一つです：誰も広告していないクリーンなIP上でDNSリゾルバを立ち上げ、インターネットに好き勝手に話しかけさせます。リゾルバの唯一の仕事は、静かに待機し、すべてをログに記録し、結果のクエリをGrafanaに送り込むことです。docker compose up -d...

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

DNS-Poisoning-Triage-Lab

DNS 与 ARP 流量分类实验 在 Arch Linux 工作站上完成的网络安全教育性数据包分析及解析器加固练习。 范围： 本仓库是一个学习项目。附带的流量捕获可用于练习 DNS 和 ARP 检查，但它本身不能 证明存在实时的缓存投毒攻击、恶意硬件、对特定 CVE 的利用，或与 NetworkManager 路由度量存在因果关系。 我为何修订此项目 我的第一版分析将若干观察结果视为已确认的成因。那过于武断了。一个 839 字节的 DNS 帧并不自动意味着畸形或恶意，而 DNS-over-TLS 保护的是发往所配置上游解析器的 DNS 流量——它并不能阻止 ARP 欺骗或所有二层/三层攻...

ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root

Root has patched CVE-2026-44690 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root

Root has patched CVE-2026-32665 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50046 CVE-2026-50046 in unbound - Patched by Root

Root has patched CVE-2026-50046 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-40691 CVE-2026-40691 in unbound - Patched by Root

Root has patched CVE-2026-40691 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root

Root has patched CVE-2026-50252 in the unbound package for Root:Debian:13. Multiple fixed versions available...

K000163141: NLnet Labs Unbound vulnerability CVE-2026-42959

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter...

K000163139: NLnet Labs Unbound vulnerability CVE-2026-33278

Security Advisory Description NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination pointer. ...

ROOT-OS-DEBIAN-11-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root

Root has patched CVE-2026-44690 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42960 CVE-2026-42960 in unbound - Patched by Root

Root has patched CVE-2026-42960 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-42959 CVE-2026-42959 in unbound - Patched by Root

Root has patched CVE-2026-42959 in the unbound package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root

Root has patched CVE-2026-50252 in the unbound package for Root:Debian:11. Multiple fixed versions available...