dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

Important: Red Hat Security Advisory: .NET 5.0 security and bugfix update

An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: .NET Core 3.1 security and bugfix update

An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: .NET 5.0 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 5.0.204 and .NET Runtime 5.0.7...

Important: .NET Core 3.1 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.116 and .NET Runtime 3.1.16...

CVE-2021-31957

ASP.NET Core Denial of Service Vulnerability...

CVE-2021-31957

ASP.NET Core Denial of Service Vulnerability...

Denial of service

ASP.NET Denial of Service Vulnerability...

CVE-2021-31957 ASP.NET Core Denial of Service Vulnerability

...

CVE-2021-31957

The CVE-2021-31957 issue is an ASP.NET Core Denial of Service vulnerability. It affects ASP.NET Core apps when handling client disconnects, allowing remote attackers to trigger a DoS without authentication. Affected platforms include .NET 5.0 and .NET Core 3.1 runtimes. The advisory states that e...

ASP.NET Core Denial of Service Vulnerability

...

KLA12200 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET can be exploited remotely to cause denial o...

CVE-2021-31957: Undefined Security Weakness

ASP.NET Core Denial of Service Vulnerability...

Checkbox Survey insecurely deserializes ASP.NET View State data

Overview Checkbox Survey prior to version 7.0 insecurely deserializes ASP.NET View State data, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable server. Description CVE-2021-27852 Checkbox Survey insecurely deserializes ASP.NET View State data. Checkbox...

ABPTTS - TCP Tunneling Over HTTP/HTTPS For Web Application Servers

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

SQL Injection Vulnerability in Razor's Human Resource Management System

LeiSpeed Human Resource Management System can quickly establish the human resource within the enterprise, the system is developed by ASP.NET MSSQL, which contains the functions of personnel information query and file management and so on. There is a SQL injection vulnerability in Leixu HRMS, whic...

total.js Remote Code Execution Vulnerability

total.js is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. It can be used as web, desktop, service or IoT application. Affected versions of this package are vulnerable to Remote Code Execution RCE via set. PoC js // To be ru...

Design/Logic Flaw

DISPUTED An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use...

CVE-2021-28141

CVE-2021-28141 affects Progress Telerik UI for ASP.NET AJAX 2021.1.224. An issue allows unauthorized access to MicrosoftAjax.js via Telerik.Web.UI.WebResource.axd, potentially enabling an attacker to gain server access and execute code by appending a command after the URI using the TSM_HiddenFiel...

PT-2021-17767 · Progress · Progress Telerik Ui For Asp.Net Ajax

Name of the Vulnerable Software and Affected Versions: Progress Telerik UI for ASP.NET AJAX version 2021.1.224 Description: An issue was discovered in Progress Telerik UI for ASP.NET AJAX, allowing unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may...