762 matches found
CVE-2020-1350
CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...
dRMM-CVE-2020-1350-response
Overview Microsoft announced CVE-2020-1350 on July 14 2020. This vulnerability in Windows DNS server goes back to Server 2003 and is broadly thought to be wormable. This script follows the intructions from KB456509...
SIGRed
CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...
cve-2020-1350
This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS. NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can...
CVE-2020-1350
Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...
CVE-2020-1350_HoneyPoC
This is an educational exercise. Use at your own risk. CVE-2020-1350 Exploit aka SIGRED This is a lesson as to why you should not trust binaries on the internet., the workaround fix is genuine. Workaround Fix reg add "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v...
CVE-2020-1350-Fix
KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...
CVE-2020-1350-DoS
CVE-2020-1350 SIGRed - Windows DNS DoS Exploit Credits for the bug are entirely down to Check Point Research @cpresearch who did an incredible writeup of this bug props to @sagitz for the post Their writeup can be found here. This exploit was written by @maxpl0it Quick summary of how it works: 1...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
EUVD-2026-88215
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection during a Windows DNS SPF/TXT record push. This vulnerability can lead to remote code execution (RCE). The provided documents do not specify the exact component, file, or root cause details beyond the injec...
dns_client_fuzzing
Fuzzing the Microsoft Windows DNS client After the critical vulnerability of CVE-2026-41096 was discovered, I decided to take a crack at this...
CVE-2026-12268: Improper Input Validation
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the DNS Server component of the Windows operating system is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-78523
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-72987
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...