viewstate-security-workshop

Практикум по безопасности ViewState Этот репозиторий предназначен для практикума Тестирование ASP.NET ViewState с помощью YSoNet YSoSerial.NET. Рекомендуемое чтение: Эксплуатация десериализации в ASP.NET через ViewState Рекомендуемые инструменты для решения лабораторных заданий когда лаборатория...

CVE-2025-30406

CVE-2025-30406 Эксплойт PoC для ViewState Обзор Этот скрипт Proof-of-Concept PoC демонстрирует эксплуатацию десериализации ViewState для CVE-2025-30406 в ASP.NET приложениях. Он использует ysoserial для генерации вредоносной полезной нагрузки ViewState и отправляет её на указанный URL для...

AspDotNetWrapper-Edited-

AspDotNetWrapper для проверки ключей машины viewstate в ASP.NET скачивание склонируйте и распакуйте файл в Windows Использование AspDotNetWrapper.exe --keypath MachineKeys.txt --encrypteddata --decrypt --purpose=viewstate --modifier= --macdecode замените на viewstate= параметр value in the source...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Автор Mohammed Idrees Banyamer Исследователь в области безопасности GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Описание CVE‑2026‑26335 — критическая уязвимость удалённого выполнения кода без...

EUVD-2019-8731

Malware in sbrugna...

Checkbox Survey 6.12 <= 6.18 RCE

Checkbox Survey is an ASP.NET application that can add survey functionality to a website. Prior to version 7.0, Checkbox Survey implements its own View State functionality by accepting a VSTATE argument, which it then deserializes using LosFormatter. Because this data is manually handled by the...

Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey, perform cross-site-scripting XSS attacks, compromise the ASP.NET ViewState,...

CVE-2019-19092

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code MAC. Alterations to Viewstate might thus not be noticed...

CVE-2019-19092: Missing Authentication for Critical Function

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code MAC. Alterations to Viewstate might thus not be noticed...

Telerik Web UI Information Disclosure (CVE-2017-9248)

A security bypass vulnerability exists in Telerik Web UI. Successful exploitation of this vulnerability can lead to cross-site scripting, arbitrary file uploads and downloads, leak of MachineKey and compromise of the ASP.NET ViewState on the affected system...

Telerik Web UI contains cryptographic weakness

Overview The Telerik Web UI, versions R2 2017 2017.2.503 and prior, is vulnerable to a cryptographic weakness which an attacker can exploit to extract encryption keys. Description CWE-326: Inadequate Encryption Strength - CVE-2017-9248The Telerik.Web.UI.dll is vulnerable to a cryptographic...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...