283 matches found
badsecrets
badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...
CVE-2019-18935
CVE-2019-18935 Telerik UI for ASP.NET AJAX RadAsyncUpload Handler .NET JSON Deserialization Version List 2007.1423 2007.1521 2007.1626 2007.2918 2007.21010 2007.21107 2007.31218 2007.31314 2007.31425 2008.1415 2008.1515 2008.1619 2008.2723 2008.2826 2008.21001 2008.31105 2008.31125 2008.31314...
RAU_crypto
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...
dp_cryptomg
dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...
Telerik_CVE-2019-18935
TelerikUI Python ในใญใฃใใผ telerikrcescan.py ไพ CVE-2019-18935 ใฎ IP ใ่ฉไพกใใ $ python3 telerikrcescan.py -t 192.168.44.21 CVE-2019-18935 ใฎใในใๅใ่ฉไพกใใ $ python3 telerikrcescan.py -t vulnerable.telerik.net CVE-2019-18935 ใฎ CIDR ใใใใฏใผใฏ็ฏๅฒใ่ฉไพกใใ $ python3 telerikrcescan.py -r 23.253.4.0/24 ใฟใผใฒใใใฎใชในใใ่ฉไพกใใ $ pytho...
Telerik_CVE-2019-18935
TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...
CVE-2019-18935-bypasswaf
CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...
dp_crypto
dpcrypto ๅบไบBase64็ๅ ๅฏ้ข่จๆบๆผๆดๅฉ็จๅทฅๅ ท๏ผ้ๅฏนCVE-2017-9248๏ผTelerik UI for ASP.NET AJAX ๅฏน่ฏๆกๅค็็จๅบ๏ผ ๅๅธๅจ exploit-db ไธ ๆดๆฐไบ 2020 ๅนดโโ่ฏทๆณจๆ๏ผexploit-db ไธ็็ๆฌไธ GitHub ไธ็ๆๆฐ็ๆฌ็ธๆฏๅทฒ็ป้ๅธธ่ฟๆถใ https://www.exploit-db.com/exploits/43873/ ๅฆ่ฏทๅ้ ๆ็ๅฆไธไธช Telerik UI ๆผๆดๅฉ็จๅทฅๅ ท๏ผ้ๅฏน CVE-2017-11317 ๅ CVE-2017-11357๏ผๅฏ่ฝไนไผๅผ่ตทไฝ ็ๅ ด่ถฃใๅฏๅจไปฅไธๅฐๅ่ทๅ๏ผ...
CVE_2019_18935
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...
Telerik-UI-ASP.NET-AJAX-Exploitation
Telerik-UI-ASP.NET-AJAX-Exploitation Unrestricted File Upload by Weak Encryption affected versions CVE-2017-11317 2. Remote Code Execution by Insecure Deserialization - CVE-2019-18935...
Telerik_CVE-2019-18935
TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...
UI_CVE-2017-9248
UICVE-2017-9248 Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler...
CVE-2019-18935-exploit-study
CVE-2019-18935-exploit-study In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies...
CVE-2019-18935
CVE-2019-18935 Exploit Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability. How to Run Step 1: Clone the Project git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Step 2: In CVE-2019-18935.py, modify line 15: version =...
telerik-scanner-CVE-2019-18935
Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. ๐จ Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...
CVE-2019-18935
CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. ๐ฏ Overview CVE-2019-18935 is a critical .NET...
Telerik UI for ASP.NET AJAX 2010.1.309 < 2026.2.708 Multiple RadAsyncUpload Vulnerabilities
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2010.1.309 or later and prior to 2026.2.708. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can...
Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...
Telerik UI for ASP.NET AJAX 2009.1.314 < 2026.2.708 LayoutBuilder XXE DoS
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.314 or later and prior to 2026.2.708. It is, therefore, affected by a denial of service vulnerability. The internal LayoutBuilder control processes client-state XML without disabling DTD processing,...
Telerik UI for ASP.NET AJAX 2009.1.311 < 2026.2.708 RadChart ChartImage.axd File Read
The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.311 or later and prior to 2026.2.708. It is, therefore, affected by an information disclosure vulnerability. The obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated...