PT-2025-7217 · Duende · Duende.Accesstokenmanagement

Name of the Vulnerable Software and Affected Versions: Duende.AccessTokenManagement affected versions not specified Description: Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token...

CVE-2022-0243

Cross-site Scripting XSS - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2...

CVE-2020-5261

Saml2 Authentication services for ASP.NET NuGet package Sustainsys.Saml2 greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Token Replay Detection is an important defence in depth measure for Single Sign On solutions. The 2.5.0 version is patche...

CVE-2024-47604

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...

Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Microsofft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-895 Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-893 Malicious code in Microsofft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in СityTalk.CommonLibrary (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Micrоsoft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-894 Malicious code in Micrоsoft.EntetyFrameworkCore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-897 Malicious code in СityTalk.CommonLibrary (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Мircosоft.ЕntitуFramеworkСоrе (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-896 Malicious code in Мircosоft.ЕntitуFramеworkСоrе (NuGet)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the NuGet package management system, related to synchronization errors when using a shared resource, allows a hacker to execute arbitrary code.

The vulnerability of the NuGet package management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

Malicious code in nuget.shouldly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4b735ba3b9d57b25bc19668899fc94bb9c054a0646d0c7a07800f9dbedf693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11511 Malicious code in Modernzel.UI.WinForms (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Modernial.UI.WinForms (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Modernial.UI.WinForm (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11510 Malicious code in Modernial.UI.WinForms (NuGet)

--- -= Per source details. Do not edit below this line.=-...