Exploit for Improper Input Validation in Microsoft

CVE-2023-36899 The CVE-2023-36899 vulnerability involves a b...

CVE-2023-36899

creationtimestamp| type| source ---|---|--- 2023-08-10 16:18:02+00:00| published-proof-of-concept| https://t.me/ptswarm/182 2023-08-11 14:40:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4901 2023-08-12 12:43:01+00:00| published-proof-of-concept|...

Security Updates for Microsoft .NET Framework (August 2023)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability in applications running on IIS using their parent application's Application Pool which can lead to...

Microsoft .NET Framework Multiple Vulnerabilities (KB5029647)

This host is missing a critical security update according to Microsoft KB5029647 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-36899

ASP.NET Elevation of Privilege Vulnerability...

CVE-2023-36899

ASP.NET Elevation of Privilege Vulnerability...

CVE-2023-36899

CVE-2023-36899 is described as a .NET Framework/ASP.NET elevation of privilege issue linked to IIS and cookieless sessions. The connected exploit writeups show an IIS environment where the 1cookieless1 feature can be abused to bypass authentication and access protected resources by crafting URL...

CVE-2023-36899 ASP.NET Elevation of Privilege Vulnerability

...

August 8, 2023-KB5029647 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

August 8, 2023-KB5029648 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

None None...

August 8, 2023-KB5028948 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2

None None...

August 8, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 (KB5029654)

August 8, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 KB5029654 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2 REMINDER Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 have reached...

August 8, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5029568)

August 8, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5029568 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2 Microso...

August 8, 2023-Security Only Update for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 (KB5029569)

August 8, 2023-Security Only Update for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 KB5029569 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2 REMINDER Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 have reached the en...

CVE-2021-36899

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...

CVE-2021-36899

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...

CVE-2021-36899 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...

CVE-2021-36899

The CVE-2021-36899 entry concerns the WordPress Asset CleanUp: Page Speed Booster plugin, versions

CVE-2022-36899

creationtimestamp| type| source ---|---|--- 2022-07-27 18:52:47+00:00| seen| https://t.me/cibsecurity/47112...

CVE-2022-36899

Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties...