Security Update for Microsoft ASP.NET Core (September 2020)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.22, or 3.1.x 3.1.8. It is, therefore, affected by a security feature bypass vulnerability in the way ASP.NET Core parses encoded cookie names. An unauthenticated, remote attacker can exploit this issue, by sending a...

Spoofable Cookies

Microsoft asp.net has caused spoofable cookies. It does not properly encode the data string parsed to cookie name value, allowing an attacker who can perform a secondary exploit such as an XSS vulnerability in the web site to inject the spoofed cookies if the prefixes are used...

Microsoft Asp.net Core Privilege Escalation (CVE-2019-1302)

An elevation of privilege vulnerability exists in microsoft asp.net core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

megatrax.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1146564 Security Researcher Manojkhd Helped patch 44 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting megatrax.com website and its users. Following coordinat...

Security Update for Microsoft ASP.NET Core (January 2020)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.15, 3.0.x 3.0.2, or 3.1.x 3.1.1. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully...

Microsoft ASP.NET Core CVE-2020-0603 Remote Code Execution Vulnerability

Description Microsoft ASP.NET Core is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Security Update for Microsoft ASP.NET Core (Sep 2019)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.2, or 2.2.x 2.2.1. It is, therefore, affected by an elevation of privilege vulnerability that could lead to a content injection attack enabling an attacker to run a script in the context of the logged-on user. An...

Microsoft ASP.NET Core CVE-2019-1302 Remote Privilege Escalation Vulnerability

Description Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ASP.NET Core 2.1 Microsoft ASP.NET Core 2.2 Microsoft ASP.NET Core 3.0 Recommendations Block external access ...

Security Update for Microsoft ASP.NET Core (July 2019)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.12, 2.2.x 2.2.6. It is, therefore, affected by a spoofing vulnerability that could lead to an open redirect. An unauthenticated, remote attacker could exploit this issue, via a link that has a specially crafted URL, a...

Microsoft ASP.NET Core CVE-2019-1075 Spoofing Vulnerability

Description Microsoft ASP.NET Core is prone to a spoofing vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirect...

Security Update for Microsoft ASP.NET Core (DoS) (May 2019)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.11, 2.2.x 2.2.5. It is, therefore, affected by a denial of service DoS vulnerability when ASP.NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a...

Microsoft ASP.NET Core CVE-2019-0981 Denial of Service Vulnerability

Description Microsoft ASP.NET Core is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft .NET Core 1.0 Microsoft .NET Core 1.1 Microsoft .NET Core 2.1 Microsoft .NET Core 2.2 Microsoft .NET...

Microsoft ASP.NET Core CVE-2019-0815 Denial of Service Vulnerability

Description Microsoft ASP.NET Core is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft ASP.NET Core 2.2 Recommendations Block external access at the network boundary, unless external parti...

Security Update for Microsoft ASP.NET Core (DoS) (January 2019)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.7, 2.2.x 2.2.1. It is, therefore, affected by a denial of service DoS vulnerability when ASP.NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2019-16189)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core version 2.1,...

Microsoft ASP.NET CVE-2019-0564 Denial Of Service Vulnerability

Description Microsoft ASP.NET is prone to a denial-of-service vulnerability. Successful exploits will attackers to cause a denial of service condition. Technologies Affected Microsoft ASP.NET Core 2.1 Recommendations Block external access at the network boundary, unless external parties require...

Microsoft ASP.NET Core CVE-2019-0545 Information Disclosure Vulnerability

Description Microsoft ASP.NET Core is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft .NET Core 2.1 Microsoft .NET Core 2.2 Microsoft .NET Core 2.3 Microsoft...

Microsoft ASP.NET Core CVE-2019-0548 Denial of Service Vulnerability

Description Microsoft ASP.NET Core is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. ASP.NET Core 2.1 and 2.2 are vulnerable. Technologies Affected Microsoft ASP.NET Core 2.1 Microsoft ASP.NET Core 2.2 Recommendations...

Byte-Elaborazioni Web Design 1.0 SQL Injection

Exploit Title : Byte-Elaborazioni Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : Byte-Elaborazioni.Com Tested On : Windows Category : WebApps Version Information : 1.0 - Microsoft ASP.NET - IIS 6.0 + Windows Server Operating System Exploit...

Microsoft ASP.NET Core Security Feature Bypass Vulnerability (Jul 2018)

This host is missing an important security update according to Microsoft advisory CVE-2018-8171. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...