2001 matches found
dotnet: ASP.NET Core JWT token logging
ASP.NET Core and Visual Studio Information Disclosure Vulnerability...
Security Update for Microsoft ASP.NET Core (August 2021)
The Microsoft ASP.NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected...
dotnet: ASP.NET Core WebSocket frame processing DoS
An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...
Important: .NET Core 3.1 security and bugfix update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.118 and .NET Runtime 3.1.18...
CVE-2021-26423
An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...
CVE-2021-34532
ASP.NET Core and Visual Studio Information Disclosure Vulnerability...
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
...
KLA12257 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in .NET Core and Visual Studio can ...
ASP.NET ViewState MAC Not Enabled
The ViewState is a parameter specific to the ASP.NET framework, it's used as a breadcrumb trail when the user navigates the application preserving values and controls between different web pages. Present on the pages in the viewstate parameter, all the values are serialized and encoded in base64 ...
ASP.NET ViewState Not Encrypted
The ViewState is a parameter specific to the ASP.NET framework, it's used as a breadcrumb trail when the user navigates the application preserving values and controls between different web pages. Present on the pages in the viewstate parameter, all the values are serialized and encoded in base64 ...
New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits
A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet Information Services IIS servers to infiltrate their networks...
IntelliChoice eFORCE Software Suite 2.5.9 Username Enumeration
IntelliChoice eFORCE Software Suite v2.5.9 Username Enumeration Vendor: IntelliChoice, Inc. Product web page: https://www.eforcesoftware.com Affected version: 2.5.9.6 2.5.9.5 2.5.9.3 2.5.9.2 2.5.9.1 2.5.8.0 2.5.7.20 2.5.7.18 2.5.6.18 2.5.4.6 2.5.3.11 Summary: IntelliChoice is a United States...
IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration Vulnerability
Exploit Title: IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration Exploit Author: LiquidWorm Vendor Homepage: https://www.eforcesoftware.com IntelliChoice eFORCE Software Suite v2.5.9 Username Enumeration Vendor: IntelliChoice, Inc. Product web page: https://www.eforcesoftware.com...
TripSpark VEO Transportation SQL Injection
Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection Google Dork: inhtml:"Student Busing Information" Date: 07/27/2021 Exploit Author: Sedric Louissaint @LKn0w Vendor Homepage: https://www.tripspark.com Software Document Link:...
Description of the security update for SharePoint Server 2019: July 13, 2021 (KB5001975)
None None...
Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.7-alt1
July 1, 2021 Vitaly Lipatov 5.0.7-alt1 - ASP.NET 5.0.7 - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...
Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.7-alt1
June 30, 2021 Vitaly Lipatov 5.0.7-alt1 - new version 5.0.7 with rpmrb script - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...
Umbraco CMS Open Redirection Vulnerability
Umbraco CMS is an open source content management system CMS based on ASP.NET technology. An open redirect vulnerability exists in Umbraco CMS versions prior to 7.15.7. The vulnerability stems from insufficient url validation in booting.aspx. No detailed vulnerability details are available at this...
PageAdminCMS of Zhongshan Huatuo Information Technology Co., Ltd. suffers from arbitrary file downloading vulnerability
PageAdminCMS is a self-service website building system based on asp.net mvc development. Ltd. PageAdminCMS arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...
[ASA-202106-38] aspnet-runtime-3.1: denial of service
Arch Linux Security Advisory ASA-202106-38 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-31957 Package : aspnet-runtime-3.1 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2047 Summary ======= The package...