24 matches found
seal-security-nuget-demo-net7
浏览器 + CLI 演示(NuGet/C)— .NET 7 版本 为什么选择 .NET 7 分支? 这是规范版 seal-security-nuget-demo(目标框架为 net9.0)的重定向分支。漏洞利用场景、控制器和密封包列表完全相同——只有TargetFramework 不同。 它存在的原因是大多数企业客户无法按需迁移到最新的 .NET SDK。.NET 7 已于 2024 年 5 月 14 日停止支持 ,但真实的生产环境仍然基于它运行,原因可能是兼容性、认证或运维需求。这正是 Seal Security 的设计场景:当客户无法(或不愿)进行主版本升级时,Seal...
seal-security-nuget-demo-net7
Demo de navegador + CLI NuGet/C — Edición .NET 7 ¿Por qué un fork de .NET 7? Este es un fork reorientado del demo canónico seal-security-nuget-demo que apunta a net9.0. La historia del exploit, los controladores y la lista de paquetes sellados son idénticos — solo difiere elTargetFramework. Exist...
CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
CVE-2025-26682
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2025-24070
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...
CVE-2025-21171
.NET Remote Code Execution Vulnerability...
CVE-2025-21173
.NET Elevation of Privilege Vulnerability...
CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-43499
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-43498
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-38229
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-43484
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...
CVE-2024-43483
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...
CVE-2024-43485
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-30105
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38095
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38081
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
Fedora 39 : dotnet7.0 (2023-4334d47fff)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4334d47fff advisory. This is the November 2023 monthly update for .NET 7. It includes several security fixes. Release Notes:...