pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
68
- Mentions · 7d0
- Mentions · 30d3
- All mentions7
- First seenSep 16, 2026
- Last mentioned20d ago
Timeline
7 articles · newest firstISC BIND 9 flaws can exhaust resources or crash named
Four CVEs cover message-processing exhaustion, GSS-TSIG memory corruption, and unexpected exits.
64
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
34
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
CISA added five exploited ProFTPD, ONLYOFFICE, Strapi, Struts, and BIND flaws to the KEV catalog.
78
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
CISA added five Flax Typhoon-exploited flaws to the KEV catalog, with a federal patch deadline of October 11.
86
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.
65
ISC BIND security advisory (AV26-931)
Canadian Cyber Centre relays ISC advisory on vulnerabilities affecting multiple BIND 9 branches; administrators should review the matrix and apply updates.
32
Related CVEs
by mentions- CVE-2015-330699%10.0Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2015-5477100%7.5Remote denial of service in ISC BIND via TKEY queries
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2026-94300<1%8.1GSS-TSIG UDP replay memory corruption in BIND 9 named
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- Use-After-Free DoS in ISC BIND 9 DNS64 Resolvers
- Algorithmic CPU-exhaustion DoS in ISC BIND 9 resolver via cached SVCB/HTTPS records
- Unauthenticated DoS in ISC BIND named via crafted 65536-byte negative DNS answers
Appears with
- Bindproduct · 3
- BIND 9product · 3
- Microsoftvendor · 2
- Strapiproduct · 2
- Apachevendor · 2
- Canadian Centre for Cyber Securityorganization · 2
- ONLYOFFICE Docsproduct · 2
- Microsoft Exchangeproduct · 2
- CISAorganization · 2
- GitLabvendor · 2
- ProFTPDproduct · 2
- ONLYOFFICEvendor · 2
- Apache Strutsproduct · 2
- Strapivendor · 2
- GitLabproduct · 1
- Canonicalvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.