CVE-2025-55315

CVE-2025-55315...

CVE-2025-55315-Scanner-Monitor

CVE-2025-55315 脆弱性スキャナーおよびTLSプロキシ このリポジトリには、CVE-2025-55315に対して脆弱なASP.NET Coreアプリケーションを検出・監視するためのツールが含まれています。この脆弱性は、競合するHTTPヘッダーによるHTTPリクエストスマグリングに関連しています。 含まれるツール 1. Python脆弱性スキャナー（CVE-2025-55315check.py） URLのリストをスキャンし、既知の脆弱なASP.NET CoreバージョンについてServer HTTPヘッダーをチェックします。 使用方法 pip install requests...

CVE-2025-55315-

CVE-2025-55315 脆弱性研究 このプロジェクトには、CVE-2025-55315 脆弱性に関する研究および分析コードが含まれています。 プロジェクト概要 このリポジトリは、CVE-2025-55315 脆弱性の技術的詳細、影響範囲、および可能な悪用方法を研究・分析するために使用されます。なお、本研究は学術的およびセキュリティ防御目的のみを対象としています。 ファイル説明 CVE-2025-55315漏洞利用研究.py - 主要な研究および分析スクリプト 使用方法 Python 3 環境がインストールされていることを確認し、以下のコマンドを実行してください： python...

📄 ASP.net 8.0.10 Core Kestrel HTTP Request Smuggling

This Metasploit auxiliary module targets a critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel caused by improper parsing of malformed chunked transfer encoding notably LF-only line handling and case-variant headers like chUnKEd...

MiracleLinux 9 : dotnet9.0-9.0.111-1.el9_6.ML.1 (AXSA:2025-10978:23)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10978:23 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET...

PT-2025-55315

Bump release to 9.2.24-9.0.3.tuxcare.els1...

EUVD-2025-55315

Malicious code in communist-jade-coyote npm...

CVE-2025-55315 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know

On October 14, 2025, Microsoft released a security update addressingCVE-2025-55315, a vulnerability in ASP.NET Core that allows HTTP request smuggling. While request smuggling is a known technique, this security update addresses a scenario with a high CVSS score to help encourage mitigation actio...

Linux Distros Unpatched Vulnerability : CVE-2025-55315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2025-1231)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1231 advisory. Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally. CVE-2025-55247 Inadequate encryption strength in .NET, .NET...

AlmaLinux 9 : .NET 8.0 (ALSA-2025:18149)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18149 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...

AlmaLinux 8 : .NET 8.0 (ALSA-2025:18148)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18148 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...

.NET 8.0 security update

An update is available for dotnet8.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

RLSA-2025:18153 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime...

.NET 9.0 security update

An update is available for dotnet9.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

.NET 9.0 security update

An update is available for dotnet9.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

SUSE CVE-2025-55315

unknown...

CVE-2025-55315 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap, dotnet, azure-functions-extension-bundles...

RHEL 9 : .NET 8.0 (RHSA-2025:18256)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18256 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...