CVE-2018-14644

An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers fo...

CVE-2018-14644

An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers fo...

PT-2018-12638 · Powerdns +3 · Powerdns Recursor +3

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions 4.0.0 through 4.1.4 Description: A remote attacker can send a DNS query for a meta-type like OPT, leading to a zone being wrongly cached as failing DNSSEC validation. This issue arises when the parent zone is signed...

Debian DLA-1563-1 : tzdata new upstream version

tzdata upstream released version 2018g. Notables changes since 2018e previous version available in jessie include : - Morocco switched to permanent +01 on 2018-10-27. - Volgograd moved from +03 to +04 on 2018-10-28. - Fiji ends DST 2019-01-13, not 2019-01-20. - Most of Chile changes DST dates,...

CVE-2016-2120

An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overfl...

UBUNTU-CVE-2016-2120

An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overfl...

DEBIAN-CVE-2016-2120

An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overfl...

October 24, 2018—KB4462933 (OS Build 17134.376)

None None...

October 18, 2018—KB4462932 (OS Build 16299.755)

None None...

October 18, 2018—KB4462928 (OS Build 14393.2580)

None None...

October 18, 2018—KB4462939 (OS Build 15063.1418)

None None...

PT-2018-3893 · D Link · D-Link Dir-809 A1 +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-809 A1 versions 1.09 and earlier D-Link DIR-809 A2 versions 1.11 and earlier D-Link DIR-809 Guest Zone versions 1.09 and earlier Description: The issue concerns the storage of device passwords, including the admin password and the...

CVE-2018-14080: Improper Authentication

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file...

Microsoft Office: Protection From Zone Elevation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officezoneelevation.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Protection From Zone Elevation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

Microsoft Office: Local Machine Zone Lockdown Security

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officelockdownsecurity.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Local Machine Zone Lockdown Security Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2018-17005

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall dmz enable...

DEBIAN-CVE-2016-7073

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found...

DEBIAN-CVE-2016-7074

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check that the TSIG record is the last one, leadi...

UBUNTU-CVE-2016-7073

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found...

BillCipher - Information Gathering Tool For A Website Or IP Address

Information Gathering tool for a Website or IP address, use some ideas from Devploit. BillCipher can work in any operating system if they have and support Python 2, Python 3, and Ruby. Features DNS Lookup Whois Lookup GeoIP Lookup Subnet Lookup Port Scanner Page Links Zone Transfer HTTP Header Ho...