{"uuid": "f24a0d72-1e69-449d-8f89-c6e80c205f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42889", "type": "seen", "source": "https://t.me/hacking_Attack/78060", "content": "hacking: security in practice\nHow can triggering DNS lookups on a foreign system be a security threat?\n\nIn Text4shell (CVE-2022-42889) there are 3 potential security vulnerabilities which are triggered by String substitution marked by specific prefixes, which could lead to problems. One of them is \"script\" which can lead to code injection, self explainatory.\n\nThe other two are \"dns\" and \"url\" which according to the CVE \"could result in (...) contact with remote servers\".\n\nI can't quite understand why pure contact with remote servers is a security concern. How is it exploitable to make dns lookups for the hostname of an ip address via a foreign system? Why should that be a problem? To map out internal structure if its a bigger network?\n\nsubmitted by /u/mangyCarl3 \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:15.570837Z"}