Code injection

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225

CVE-2010-4225 concerns the mod_mono XSP component in Mono 2.8.x before 2.8.2. The issue is an unloading-bug that enables remote attackers to obtain the source code of ASP.NET (.aspx) applications. Affected software is Mono with the mod_mono XSP module; specific impact is source-code disclosure. R...

CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

Mono/Moonlight Generic Type Argument - Privilege Escalation

Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/ https://www.securityfocus.com/bid/45051/info Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful...

Mono/Moonlight Local Privilege Escalation

Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will compromise the affected application and possibly the underlying computer. PoC: using System; using...

Fedora Update for bareftp FEDORA-2010-18323

Check for the Version of bareftp OpenVAS Vulnerability Test Fedora Update for bareftp FEDORA-2010-18323 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

CVE-2010-4254

CVE-2010-4254 affects Mono/Moonlight: when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, it does not properly validate arguments to generic methods, allowing remote attackers to bypass generic constraints and possibly execute arbitrary code via a crafted method call. Connected advi...

CVE-2010-4254: Improper Input Validation

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

Mandriva Update for mono MDVSA-2010:240 (mono)

Check for the Version of mono OpenVAS Vulnerability Test Mandriva Update for mono MDVSA-2010:240 mono Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for mono MDVSA-2010:240 (mono)

Check for the Version of mono OpenVAS Vulnerability Test Mandriva Update for mono MDVSA-2010:240 mono Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

SuSE 11 / 11.1 Security Update : mono-core / Mono (SAT Patch Numbers 2326 / 2474)

Mono's ASP.NET implementation did not set the 'EnableViewStateMac' property by default. Attackers could exploit that to conduct cross-site scripting XSS attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

Mono code execution

Untrusted search library...

Mandriva Linux Security Advisory : mono (MDVSA-2010:240)

A vulnerability was discovered and corrected in mono : Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory CVE-2010-4159. Packages for 2009.0 are provided as of th...

[ MDVSA-2010:240 ] mono

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:240 http://www.mandriva.com/security/ Package : mono Date : November 24, 2010 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in mono...