Lucene search
+L

701 matches found

Kitploit
Kitploit
added 2026/09/13 8:03 a.m.5 views

CVE-2025-55315-PoC-Exploit

Herramienta de Pentest CVE-2025-55315 Herramienta de explotación de contrabando de solicitudes HTTP para ASP.NET Core Kestrel ⚠️ ADVERTENCIA LEGAL ¡ESTA HERRAMIENTA ES SOLO PARA PRUEBAS DE SEGURIDAD AUTORIZADAS! Úsela SOLO en sistemas que posea o para los que tenga autorización explícita por...

9.9CVSS7.9AI score0.65838EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 10:40 p.m.9 views

Covenant

Covenant es un framework de comando y control para .NET que tiene como objetivo resaltar la superficie de ataque de .NET, facilitar el uso de técnicas ofensivas de .NET y servir como una plataforma colaborativa de comando y control para equipos rojos. Covenant es una aplicación multiplataforma...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 11:44 p.m.10 views

SharpC2

SharpC2 SharpC2 is a Command & Control C2 framework written in C. It consists of an ASP.NET Core Team Server, a .NET Framework implant, and a .NET MAUI client...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.7 views

Security Update for Microsoft ASP.NET Core (September 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-report...

5.9CVSS0.00768EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 5:30 a.m.5 views

CVE-2025-55315

CVE-2025-55315 Explotación de prueba de concepto para CVE-2025-55315 Contrabando de solicitudes HTTP en .NET. Demuestra cómo la codificación fragmentada chunked encoding mal interpretada permite a atacantes introducir solicitudes de contrabando a través de proxies y balanceadores de carga en...

9.9CVSS7.9AI score0.65838EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 1:33 a.m.10 views

CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open root@kitploit: printf 'GET / HTTP/1.1\r\nHost:...

9.9CVSS7.8AI score0.65838EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.5 views

CVE-2026-21531

Security Feature Bypass in ASP.NET Core by Microsoft CVE-2026-21531 🌟 Description A vulnerability in the Azure SDK facilitates deserialization of untrusted data, enabling unauthorized attackers to execute arbitrary code over a network. ⚙️ Installation To set up the exploitation tool, follow these...

9.8CVSS8.2AI score0.0243EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 7:08 p.m.9 views

CVE-2025-55315-Scanner-Monitor

CVE-2025-55315 Vulnerability Scanner and TLS Proxy This repository contains tools to detect and monitor ASP.NET Core applications vulnerable to CVE-2025-55315, which involves HTTP request smuggling due to conflicting HTTP headers. Tools Included 1. Python Vulnerability Scanner...

9.9CVSS8AI score0.65838EPSS
SaveExploits5
EUVD
EUVD
added 2026/09/09 4:04 p.m.7 views

EUVD-2026-73741

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability...

5.9CVSS0.00768EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/09 4:04 p.m.5 views

GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

5.9CVSS0.00768EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/09 4:04 p.m.10 views

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

5.9CVSS0.00768EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-69304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-69304 No...

5.9CVSS0.00768EPSS
SaveExploits0References2
NCSC
NCSC
added 2026/09/08 6:47 p.m.11 views

vulnerabilities handled in Microsoft Developer Tools

Microsoft has identified 15 vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. The most severe vulnerability, with the identifier CVE-2026-81376, has a CVSS score of 9.6. ...

9.6CVSS0.01036EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/08 6:34 p.m.6 views

CVE-2026-57099

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

7.5CVSS0.00818EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/08 6:32 p.m.10 views

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...

5.9CVSS0.00768EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/09/08 6:18 p.m.4 views

CVE-2026-69304

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

5.9CVSS0.00768EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:17 p.m.4 views

CVE-2026-57099

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS0.00818EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:19 p.m.5 views

EUVD-2026-73886

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS0.00818EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:19 p.m.10 views

CVE-2026-57099

ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...

7.5CVSS0.00818EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/09/08 5:17 p.m.8 views

CVE-2026-69304

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

5.9CVSS0.00768EPSS
SaveExploits0
Rows per page
Query Builder