mx-takeover

mx-takeover 動作の仕組み • 機能 • インストール • 使用方法 • mx-takeoverの実行 mx-takeover はDNS MXレコードに焦点を当て、設定ミスのあるMXレコードを検出します。現在、以下の3つの手法をサポートしています。 まもなく期限切れとなるMXドメイン 未登録のMXドメイン Mailgunによって現在使用されていないドメインを指すドメイン 動作の仕組み Mailgunの攻撃シナリオ 1. あなたの会社が新しいメールサービスを使い始める。 2. あなたの会社のMXレコードがMailgunを指している（例：sub.domain.com MX...

EUVD-2025-7254

Malicious code in bioql PyPI...

CVE-2025-30132

An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...

CVE-2025-30132

An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...

IROAD V Series 安全漏洞

IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from the use of an unregistered public domain name as an internal domain name, which could lead to data exfiltration or man-in-the-middle attacks...

CVE-2025-30132

An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...

CVE-2025-30132

The IROAD Dashcam V series devices are vulnerable to data exfiltration and man-in-the-middle attacks due to the use of an unregistered public domain name as an internal domain. Because this domain is not owned by IROAD, an attacker could register it to intercept sensitive device traffic if the da...

CVE-2025-30132

An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...

PT-2025-11646 · Unknown · G-Net Dashcam Bb Gonx

Name of the Vulnerable Software and Affected Versions: G-Net Dashcam BB GONX devices affected versions not specified Description: The issue concerns the use of an unregistered public domain name as an internal domain, posing a security risk. This allows an attacker to potentially register the...

GNET G-ONX 安全漏洞

GNET G-ONX is a series of car recorders from GNET. A security vulnerability exists in GNET G-ONX that stems from the use of an unregistered public domain name as an internal domain name, which could lead to data exfiltration or man-in-the-middle attacks...

CVE-2023-46138

CVE-2023-46138 affects JumpServer prior to version 3.8.0, where the initial admin user used the default email domain [email protected]. Password resets occur via email, so if the domain mycompany.com is registered, this could affect password reset functionality. The issue is mitigated in versio...