PT-2019-4636

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to 2020.1.114 Description The issue concerns the deserialization of untrusted data, allowing for remote code execution. This has been exploited by multiple threat actors, including a...

CVE-2019-18935: Deserialization of Untrusted Data

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote...

Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization

This module exploits the .NET deserialization vulnerability within the RadAsyncUpload RAU component of Telerik UI ASP.NET AJAX that is identified as CVE-2019-18935. In order to do so the module must upload a mixed mode .NET assembly DLL which is then loaded through the deserialization flaw...

web.bet9ja2.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1024866 Security Researcher 0xSkywalker Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting web.bet9ja2.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of th...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

Code injection

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543: Improper Input Validation

mono 2.10.x ASP.NET Web Form Hash collision DoS...

This Week in Security News: APT33 Botnets Used for Extreme Narrow Targeting and Microsoft’s Patch Tuesday Arrives with A Patch for An IE Zero-Day

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the APT33 threat group that is using live C&C servers for extremely narrow targeting. Also, read about Trend Micro’s complete...

Ransomware Attack Downs Hosting Service SmarterASP.NET

SmarterASP.NET, a popular web hosting provider with more than 440,480 customers, has been hit with a ransomware attack that took down its customers’ websites that were hosted by the company. The company on Monday said it is in the process of recovering impacted data. SmarterASP.NET offers shared...

Security Bulletin: Information Exposure vulnerability found on IBM Security Secret Server (CVE-2019-4634)

Summary This security bulletin describes plugging some potential, minor yet significant, information leaks by the IBM Security Secret Server Web server. IBM Security Secret Server may unintentionally disclose information about their underlying technologies through headers, error messages, version...

CVE-2019-18636

A cross-site scripting XSS vulnerability in Jitbit .NET Forum aka ASP.NET forum 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in Jitbit .NET Forum aka ASP.NET forum 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter...

CVE-2019-18636

CVE-2019-18636 concerns a cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (ASP.NET forum) 8.3.8. The issue allows remote attackers to inject arbitrary script or HTML via the gravatar URL parameter . Affected component is the web UI handling gravatar URLs; root cause details are not ...

CVE-2019-18636

A cross-site scripting XSS vulnerability in Jitbit .NET Forum aka ASP.NET forum 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter...

CVE-2019-0564

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548...

The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to escalate their privileges and execute cross-site scripting attacks.

The vulnerability of the ASP.NET Core software platform is related to errors in processing web requests using templates. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and carry out a cross-site scripting attack by sending an email containing a malicious lin...