CVE-2019-12562

CVE-2019-12562 CVE-2019-12562 La Cross-Site Scripting persistente Stored XSS in DotNetNuke DNN versioni precedenti alla 9.4.0 consente a un attaccante remoto di memorizzare e incorporare lo script dannoso nella pagina di notifica dell'amministratore. L'exploit può essere utilizzato per compiere...

DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery

DotNetNuke aka DNN before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources. id: CVE-2017-0929 info: name: DotNetNuke DNN ImageHandler 9.2.0 - Server-Side Request Forgery author...

DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...

CVE-2017-9822

CVE-2017-9822 DotNetNuke spesso abbreviato come DNN è una piattaforma CMS Content Management System e un web application framework basato sulla tecnologia ASP.NET di Microsoft. Informazioni principali Prodotto interessato: DotNetNuke DNN Platform – un CMS/portal .NET molto diffuso. Data di...

DNN_CVE-2015-2794

DNNCVE-2015-2794 Plugin NSE per Nmap che analizza un'applicazione web DotNetNuke DNN per individuare una vulnerabilità di bypass dell'autenticazione amministrativa CVE-2015-2794, EDB-ID: 39777...

CVE-2025-52488

Exploit per Divulgazione di Hash NTLM tramite Normalizzazione Unicode dei Percorsi in DNN CVE-2025-52488 Panoramica Questo exploit prende di mira una vulnerabilità nelle versioni di DNN in precedenza DotNetNuke dalla 6.0.0 alla precedente alla 10.0.1 che consente agli aggressori di divulgare hash...

OSWE-Labs-Poc

OSWE -LABS Lab dockerizzati per la certificazione Web Expert OSWE. Preparazione per il prossimo corso AWAE ... Altro progetto : analisi malware & cyber threat hunting https://github.com/svdwi/BlueBox Lab disponibili per la OSWE 1. ATutor è un sistema open source di gestione dei contenuti per...

CVE-2017-9822

CVE-2017-9822 Deserializzazione del cookie DotNetNuke – Esecuzione remota di codice RCE Le versioni di DotNetNuke DNN comprese tra 5.0.0 e 9.3.0 sono affette da una vulnerabilità di deserializzazione che porta all'esecuzione remota di codice RCE. DotNetNuke utilizza il cookie DNNPersonalization p...

DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...

DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. id: CVE-2018-15811 info: name: DotNetNuke...

cve-2017-9822

CVE-2017-9822 Wichtige Informationen Umgebung einrichten Debug einrichten Analyse Debug XmlSerializer Angriffs-Gadget ObjectDataProvider ResourceDictionary Von unsicherer XML-Deserialisierung zu RCE CVE-2017-9822 DNN auch bekannt als DotNetNuke vor Version 9.1.1 ermöglicht Remote-Code-Ausführung...

DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution

DotNetNuke DNN versions between 5.0.0 - 9.3.0 are affected by a deserialization vulnerability that leads to remote code execution. id: CVE-2017-9822 info: name: DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution author: milo2012 severity: high description: DotNetNuke DNN...

CVE-2026-40305

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.2...

CVE-2026-40306

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue...

CVE-2026-40321

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased ...

DNN: Same HostGUID For All New Installs

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue...

EUVD-2026-23170

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

CVE-2026-40305

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.2...

CVE-2026-40306

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue...