ASP.NET Security Feature Bypass Vulnerability

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated. An attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts. The update addresses the vulnerability by validating the numbe...

Description of the security update for the ASP.NET security feature bypass vulnerability: July 10, 2018

None None...

KLA11288 Multiple vulnerabilities in Microsoft Development Tools

Multiple serious vulnerabilities have been found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A tampering...

Microsoft ASP.NET Core CVE-2018-8171 Security Bypass Vulnerability

Description Microsoft ASP.NET Core is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft ASP.NET Core 1.0 Microsoft ASP.NET Core 1.1...

Denial Of Service (DoS)

ASP.NET Core is vulnerable to a denial of service vulnerability. This is due to the way HTML Encoder processes unicode characters when performing encoding, which results in an exception...

Privilege Escalation

ASP.NET Core and .NET Core are affected by a privilege escalation vulnerability. An unauthenticated attacker could submit malicious input which would lead to privilege escalation due to the way the web request handler handles web requests...

Open Redirect

ASP.NET Core and Microsoft.NETCore.App are vulnerable to an open redirect vulnerability. An attacker would be able to craft a URL which would redirect victims to a malicious web page when the URL is visited...

Denial Of Service (DoS)

ASP.NET Core is affected by a denial of service vulnerability. An unauthenticated user can send a specially crafted request to the .NET Core application to cause a denial of service condition...

Information Disclosure

ASP.NET Core is affected by an information disclosure vulnerability. An attacker is able to bypass cross-origin resource sharing configurations to retrieve content from a web application...

Privilege Escalation

ASP.NET Core is vulnerable to privilege escalation. This is due to Kestrel web application failing to validate web requests which could result in HTML injection attacks to trigger a "password reset" email on behalf of a target user...

Privilege Escalation

ASP.NET Core is vulnerable to a privilege escalation vulnerability. This is due to a failure to properly sanitise web requests when an ASP.NET Core web application is created using vulnerable project templates, resulting in content-injection attacks which allow scripts to be executed in the conte...

Remote code execution

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution...

CVE-2018-7679

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution...

CVE-2018-7679

CVE-2018-7679 is a remote code execution vulnerability in Micro Focus SBM. Connected CNVD/NVD entries describe SBM versions prior to 11.4 where ASP.NET is configured with execute permission on virtual directories and user avatar images are not validated, enabling an attacker to run arbitrary code...

CVE-2018-7679

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution...

Security Bulletin: Multiple vulnerabilities may affect ASP.NET Core in IBM Bluemix

Summary Vulnerabilities in .NET Core, ASP.NET Core Could Allow Elevation of Privilege. Vulnerabilities in Node.js and the c-ares library were disclosed on July 11 2017 by the Node.js Foundation. IBM SDK for Node.js has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-0256...

ASP.NET jVideo Kit - query SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps Tested on: Kali...

ASP.NET jVideo Kit - query SQL Injection

ASP.NET jVideo Kit - query SQL Injection Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps...

ASP.NET jVideo Kit 1.0 SQL Injection

Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps Tested on: Kali linux Description : The...

ASP.NET jVideo Kit - 'query' SQL Injection

Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps Tested on: Kali linux Description : The...