86 matches found
RAU_crypto
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...
UI_CVE-2017-9248
UICVE-2017-9248 Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler...
CVE_2019_18935
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...
CVE-2019-18935
CVE-2019-18935 Telerik UI for ASP.NET AJAX RadAsyncUpload Handler .NET JSON Deserialization Version List 2007.1423 2007.1521 2007.1626 2007.2918 2007.21010 2007.21107 2007.31218 2007.31314 2007.31425 2008.1415 2008.1515 2008.1619 2008.2723 2008.2826 2008.21001 2008.31105 2008.31125 2008.31314...
CVE-2017-11317-auto-exploit-
Vulnerabilities CVE-2017-11317 . https://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference...
CVE-2019-18935
CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...
Telerik UI for ASP.NET AJAX 2011.2.712 < 2026.2.708 Multiple Vulnerabilities
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2011.2.712 or later and prior to 2026.2.708. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.2.708, insufficient validation of the language paramete...
Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...
Telerik UI for ASP.NET AJAX 2010.1.309 < 2026.2.708 Multiple RadAsyncUpload Vulnerabilities
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2010.1.309 or later and prior to 2026.2.708. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can...
Telerik UI for ASP.NET AJAX 2009.1.311 < 2026.2.708 RadChart ChartImage.axd File Read
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.311 or later and prior to 2026.2.708. It is, therefore, affected by an information disclosure vulnerability. The obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated...
Telerik UI for ASP.NET AJAX 2009.1.314 < 2026.2.708 LayoutBuilder XXE DoS
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.314 or later and prior to 2026.2.708. It is, therefore, affected by a denial of service vulnerability. The internal LayoutBuilder control processes client-state XML without disabling DTD processing,...
Telerik UI for ASP.NET AJAX < 2026.3.812 Multiple Vulnerabilities
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.3.812. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may...
CVE-2026-19219
In Progress® Telerik® UI for AJAX (ASP.NET AJAX) prior to v2026.3.812 contains a vulnerability in the RadEditor file browser (DialogHandler UploadPaths). The root cause is insufficient integrity protection of dialog request parameters, which may allow an attacker who has obtained certain applicat...
CVE-2026-14865 XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion...
CVE-2026-13190 PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution...
CVE-2026-13181 RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments...
Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
CVE-2019-18935 Nuclei Template - Bounty Submission This repos...
Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
PoC exploit for CVE-2019-18935, a vulnerability in the Windows S...
