CVE-2026-97801

A vulnerability in the .NET Framework arises from the improper validation of specified type of input . This flaw allows an unauthorized attacker to perform tampering over a network . The vulnerability has a high base severity score of 7.5 (CVSS 3.1), with an impact primarily affecting integrity ....

EUVD-2026-100458

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

CVE-2026-70007

A vulnerability exists in the .NET Framework where an out-of-bounds write flaw allows an unauthorized attacker to execute arbitrary code over a network. This issue has a CVSS 3.1 score of 8.8 (High severity) and was identified by Microsoft. The NCSC confirms that this vulnerability can result in ...

CVE-2026-85363

The .NET Framework is affected by a vulnerability involving an integer overflow or wraparound (CWE-190). This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has been assigned a High severity score of 8.80 . Remediation is available via an official fix...

CVE-2026-70035

The ½.NET Framework is affected by a deserialization of untrusted data vulnerability, which allows an unauthorized attacker to execute code over a network . The vulnerability is classified with a CVSS score of 8.8 and results in the execution of arbitrary code . No specific exploit information or...

CVE-2026-70194

The .NET Framework is affected by a security feature bypass vulnerability (CVE-2026-70194 ) caused by improper certificate validation . This flaw allows an unauthorized attacker to bypass security features over a network. The vulnerability carries a CVSS v3.1 score of 6.5 (Medium) and is categori...

EUVD-2026-99069

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-108398

The .NET Framework is affected by an untrusted search path vulnerability (CWE-426), which allows an authorized attacker to bypass a security feature locally. This vulnerability results in the evading of security measures . While specific version numbers for the affected components are not explici...

OffensivePipeline

OffensivePipeline OffensivePipeline allows you to download and build C tools, applying certain modifications in order to improve their evasion for Red Team exercises. A common use of OffensivePipeline is to download a tool from a Git repository, randomise certain values in the project, build it,...

Vm4J

Vm4J A tool for detect vmware product log4j vulnerability. How it works? First start a JNDIExploit server. Start this tool and set any config to right setting. Send payload. Screenshot Support VMware HCX VMware vCenter VMware Workspace One Will be add VMware NSX VMware Horizon VMware vRealize...

.NET Framework Tampering Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

.NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

SharpShooter

/ // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // Description SharpShooter is a payload creation framework for the retrieval and execution of arbitrary CSharp source code. SharpShooter is capable of creating...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

PT-2026-113231

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network...

PT-2026-112743

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 8.0.0 through 8.0.31...

PT-2026-112017

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 3.5 through 4.8.1 Description An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control WDAC restrictions. The attack involves using a...