6730 matches found
Microsoft .NET Framework请求过滤绕过漏洞
Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework在处理内嵌请求时存在漏洞，攻击者可能利用此漏洞注入脚本代码执行。 .NET Framework没有正确的过滤内嵌的.NET请求，允许攻击者执行跨站脚本攻击。如果Web应用在向浏览器回显输入前仅仅依赖于.NET请求过滤的话，攻击者就可能通过特制的请求注入脚本代码。 Microsoft .NET Framework 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Microsoft .NET Framework SDK MSIL工具堆溢出漏洞
Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework SDK的ildasm在反汇编DLL文件时存在堆溢出漏洞，导致在反汇编特制的DLL时可能出现拒绝服务。 出现异常的部分如下： pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size; if pvReturn == NULL cmp dword ptr pvReturn,ebx jne $L19640+1 7C3423B6h pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size...
CVE-2006-3436
Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...
CVE-2006-3436
Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...
CVE-2006-3436
CVE-2006-3436 is a Microsoft .NET Framework 2.0 ASP.NET XSS vulnerability. The flaw affects ASP.NET controls that set AutoPostBack to true, allowing an attacker to inject client-side script via HTTP requests and potentially cause information disclosure or browser-side actions. Exploitation report...
Microsoft .NET Framework contains a cross-site scripting vulnerability
Overview The Microsoft .NET Framework contains a cross-site scripting vulnerability that may allow an attacker to read or modify data in web pages and cookies. Description The Microsoft .NET Framework is a managed code programming model for Microsoft Windows operating systems. Microsoft ASP.NET i...
Update Protection against ASP.NET Information Disclosure Vulnerability (MS06-033)
ASP.NET is collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. An information disclosure vulnerability exists in ASP.Net that could allow an attacker to bypass ASP.Net security and gain unauthorized access to objects in the...
CVE-2006-1300
Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...
CVE-2006-1300
The CVE-2006-1300 entry corresponds to the .NET Framework 2.0 ASP.NET Information Disclosure vulnerability in ASP.NET that allows bypassing access restrictions to Application Folder objects by name via URL paths. Affected software includes .NET Framework 2.0 on Windows 2000 SP4, XP SP1/SP2, and W...
CVE-2006-1300
Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...
Microsoft ASP.NET Application Folder Information Disclosure Vulnerability
Description ASP.NET is prone to an information-disclosure vulnerability. This issue is due to a failure in the applications to properly validate user-supplied input. An attacker can exploit this issue to retrieve potentially sensitive information. Information retrieved may aid in further attacks...
Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure (917283)
Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure 917283 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximum Severi...
CVE-2006-1511
Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name...
Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow
source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code...
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to...
w3wp-dos.txt
--0-1633069887-1142992701=:20251 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sorry, if you are receiving multiple copies of it. Just resending as the one that I sent last night has not yet appeared. w3wp remote DoS due to improper reference of STA COM components i...
Ideal BB.NET 1.3 XSS vuln
Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...
XSS vulnerabilty in ASP.Net [with details]
In August 2004 I found XSS vulnerability in Microsoft ASP.Net, and now I publish it. Full details: En: http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml Ru: http://it-project.ru/andir/docs/aspxvuln/aspxvuln.ru.xml P.S. I to present my appologies for bad english : My native language is...
Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability (887219)
Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability 887219 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® .NET Framework Impact of Vulnerability: Information Disclosure, possible Elevation of Privilege...
