Codecepticon - .NET Application That Allows You To Obfuscate C#, VBA/VB6 (Macros), And PowerShell Source Code

Codecepticon is a .NET application that allows you to obfuscate C, VBA/VB6 macros, and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compil...

.NET Application Event ID 1026 Inventory.exe unhandled exception

On PVS server, periodic errors every 6-10 minutes are being logged: Application event ID 1026 from .NET with details:Application: Inventory.exe;The process was terminated due to an unhandled exception. Application event ID 1000 with Faulting Application name: Inventory.exe System event ID 36871...

August 7, 2017—KB4038220 (OS Build 14393.1537)

August 7, 2017—KB4038220 OS Build 14393.1537 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where a .NET application could unexpectedly terminate with an A/V in clrjit.dll...

Car-Net - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Car-Net published at the 'play' market has multiple vulnerabilities...

Privilege escalation

The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execute arbitrary code via a crafted .NET application, aka "RyuJIT Optimization Elevation of Privilege Vulnerability," a different vulnerability than...

Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

Design/Logic Flaw

The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, a...

CVE-2012-2519

CVE-2012-2519 : Untrusted search path vulnerability in Entity Framework/ADO.NET of Microsoft .NET Framework (1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4) allows local privilege gain via a Trojan DLL in the current working directory. Connected sources confirm this as a real, public entry with concret...

CVE-2012-4777

The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, a...

Ektron CMS400.NET WorkArea/ContentRatingGraph.aspx res Parameter SQL Injection

The remote host is running CMS400.NET, a .NET content management solution. The version of CMS400.NET installed on the remote host fails to sanitize user-supplied input to the 'res' parameter of the 'WorkArea/ContentRatingGraph.aspx' script before using it in a database query. An unauthenticated...