CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

CVE-2023-35391

CVE-2023-35391 affects Microsoft ASP.NET Core SignalR and Visual Studio, exposing sensitive information through the ASP.NET Core SignalR backplane (e.g., Redis backplane) in affected .NET/ASP.NET Core deployments. Connected sources specify that exploitation involves information disclosure via Sig...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. Exploiting this vulnerability allows an attacker to listen to any group or user with a specially crafted group or username and receive messages for groups they are unauthorized to view. Remediation Upgrade...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. Exploiting this vulnerability allows an attacker to listen to any group or user with a specially crafted group or username and receive messages for groups they are unauthorized to view. Remediation Upgrade...

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

...

CVE-2023-35391: Undefined Security Weakness

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

PT-2023-4295

Name of the Vulnerable Software and Affected Versions ASP.NET Core SignalR and Visual Studio affected versions not specified Description The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can potential...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-805 Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in signalr-temp-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-776 Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-chris/signalr-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f1ea95b0dd1fab3c5fd07a895d013eadc38233dd31acbf4d5640965da83210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-signalr-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cac0476e730ced0efec0aee283995a531bf62aca080c7cd7972ed59db8d6714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1287 Malicious code in azure-arm-signalr-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cac0476e730ced0efec0aee283995a531bf62aca080c7cd7972ed59db8d6714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory. - dotnet: Denial of service via backpressure issue CVE-2020-0602 - dotnet: Memory Corruption in SignalR CVE-2020-0603 Note that Nessus has not tested f...