#cachepoisoning — Public Fediverse posts

What is Web Cache Poisoning Attack and Defense: A Comprehensive Guide

In this article, I explain how the attack works, common vectors, and practical prevention technique
https://denizhalil.com/2026/01/26/web-cache-poisoning-attacks-prevention-guide/

#CyberSecurity #WebSecurity #CachePoisoning #AppSec #OWASP #InfoSec #Pentesting #RedTeam #BlueTeam #HTTP

New BIND 9 Security Flaw (CVE-2025-40778) Threatens Global DNS Infrastructure https://thecyberexpress.com/cve-2025-40778-flaw-exposes-706k-servers/ #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #Cachepoisoning #FirewallDaily #CVE202540778 #CyberNews #BIND9DNS

#CachePoisoning #vulnerabilities found in 2 #DNS resolving apps

The makers of #BIND , the Internet’s most widely used software for resolving domain names, are warning of two vulnerabilities that allow attackers to poison entire caches of results and send users to #malicious destinations that are indistinguishable from the real ones.
#security

https://arstechnica.com/security/2025/10/bind-warns-of-bugs-that-could-bring-dns-cache-attack-back-from-the-dead/

BIND Updates Address High-Severity Cache Poisoning Flaws https://www.securityweek.com/bind-updates-address-high-severity-cache-poisoning-flaws/ #Vulnerabilities #cachepoisoning #vulnerability #BIND #DNS #DoS

Critical DNS cache poisoning in dnsmasq.

Sounds like the authors wanted to do coordinated disclosure but accidentally sent it to a public mailing list???

https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2025q3/018288.html

#dnsmasq #infosec #dns #cachepoisoning

Next.js Framework Vulnerability Exposes Websites To Cache Poisoning & XSS Attacks https://cybersecuritynews.com/critical-vulnerability-exposes-websites/ #ComputerVulnerabilityNews #NextjsVulnerability #CyberSecurityNews #cachepoisoning #XSSAttacks #BugBounty

Next.js Framework Vulnerability Exposes Websites To Cache Poisoning & XSS Attacks https://cybersecuritynews.com/critical-vulnerability-exposes-websites/ #ComputerVulnerabilityNews #NextjsVulnerability #CyberSecurityNews #cachepoisoning #XSSAttacks #BugBounty

Next.js Framework Vulnerability Exposes Websites To Cache Poisoning & XSS Attacks https://cybersecuritynews.com/critical-vulnerability-exposes-websites/ #ComputerVulnerabilityNews #NextjsVulnerability #CyberSecurityNews #cachepoisoning #XSSAttacks #BugBounty

Next.js Framework Vulnerability Exposes Websites To Cache Poisoning & XSS Attacks https://cybersecuritynews.com/critical-vulnerability-exposes-websites/ #ComputerVulnerabilityNews #NextjsVulnerability #CyberSecurityNews #cachepoisoning #XSSAttacks #BugBounty

Don't miss the sequel: https://adnanthekhan.com/2024/12/21/cacheract-the-monster-in-your-build-cache/

#github #infosec #cachepoisoning #supplychainsecurity #supplychainattack

https://adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning/
#github #infosec #cachepoisoning #supplychainsecurity #supplychainattack

Well, it turns out we're not the only folks to find something in F5 this month:

https://my.f5.com/manage/s/article/K000137368

Sounds like someone else found a post-auth SQL Injection vuln. There's also some kind of cache poisoning issue that someone identified. More details on that at https://blog.malicious.group/from-akamai-to-f5-to-ntlm/#on-the-f5-hunt.

For the last issue the author was annoyed there was no bug bounty so they told F5 they were just gonna full disclosure. I suspect our bug was just bundled in with this release to get ahead of it.

Part of me would have loved the idea of accidentally stumbling onto a legit 0-day in the wild, but at this point I'm going to assume that's not the case until I see it proven otherwise.

#f5 #sqlinjection #cachepoisoning #vr #fulldisclosure

Hacking CDN Caching Servers - CDN cache poisoning write up by @bxmbn

Part1:
https://infosecwriteups.com/how-i-made-15-000-by-hacking-caching-servers-part-1-5541712a61c3

Part2:
https://infosecwriteups.com/how-i-made-16-500-hacking-cdn-caching-servers-part-2-4995ece4c6e6

Part3:
https://infosecwriteups.com/how-i-made-16-500-hacking-cdn-caching-servers-part-3-91f9d836e046?gi=d09625dfc624

#bugbountytips #bughunting #redteamingtips #pentesters #CachePoisoning #CDNSecurity

Researchers find way to revive Kaminsky’s 2008 DNS cache poisoning attack - Enlarge (credit: Henrik 5000 / Getty Images)
In 2008, researcher Dan Kaminsky revealed one of the... - https://arstechnica.com/?p=1722675 #domainnamesystem #cachepoisoning #dankaminsky #biz&it #tech #dns