Telerik-UI-ASP.NET-AJAX-Exploitation

Telerik-UI-ASP.NET-AJAX-Explotación Carga de archivos sin restricciones por cifrado débil en versiones afectadas CVE-2017-11317 2. Ejecución remota de código por deserialización insegura - CVE-2019-18935...

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study Estudio en profundidad de CVE-2019-18935, que afecta a Telerik UI for ASP.NET AJAX. Abarca la vulnerabilidad de deserialización de .NET, el controlador RadAsyncUpload, las cadenas de gadgets, la explotación de ensamblados de modo mixto y las estrategias de mitigación...

CVE-2019-18935

Exploit de CVE-2019-18935 Exploit de ejecución remota de código para Telerik UI ASP.NET AJAX a través de una vulnerabilidad de deserialización. Cómo ejecutar Paso 1: Clonar el Proyecto root@kitploit: git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Paso 2: En...

telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 漏洞扫描器 基于 Python 的安全扫描器，用于检测 Telerik UI for ASP.NET AJAX 远程代码执行漏洞（CVE-2019-18935）。 🚨 漏洞详情 CVE ：CVE-2019-18935 风险等级 ：高 CWE ：CWE-913 CVSS ：9.8（严重） 描述 Telerik UI for ASP.NET AJAX 版本 2019.3.1023 及之前版本在 RadAsyncUpload 函数中存在 .NET 反序列化漏洞，可导致远程代码执行。 受影响版本 存在漏洞 ：2019.3.1023 及之前所有版本 已...

CVE-2019-18935

CVE-2019-18935 Nuclei 模板 - 赏金提交 此仓库包含一个完整、经过验证的 Nuclei 模板，用于检测 CVE-2019-18935（Telerik UI for ASP.NET AJAX 反序列化远程代码执行漏洞），专为 ProjectDiscovery 赏金计划创建。 🎯 概述 CVE-2019-18935 是 Progress Telerik UI for ASP.NET AJAX（版本 2011.1.315 至 2019.3.1023）中的一个严重 .NET 反序列化漏洞，允许未经身份验证的远程代码执行。此漏洞： ⚠️ CVSS 评分 ：9.8（严重） 🎭...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Cadena de explotación de deserialización y evasión de autenticación de Telerik Report Server para CVE-2024-4358/CVE-2024-1800 Análisis técnico Puede encontrar un análisis de causa raíz de la vulnerabilidad en mi blog Uso root@kitploit: python CVE-2024-4358.py --targe...

CVE-2019-18935

CVE-2019-18935 Proof-of-concept exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX allowing remote code execution. Description Telerik UI for ASP.NET AJAX is a widely used suite of UI components for web applications. It insecurely deserializes JSON objects in a...

Progress Telerik Report Server - Authentication Bypass

In Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. id: CVE-2024-4358 info: name: Progress Telerik Report Server - Authenticatio...

Telerik UI for ASP.NET AJAX < 2026.3.812 Multiple Vulnerabilities

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.3.812. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may...

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-18672

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

CVE-2026-19219

In Progress® Telerik® UI for AJAX (ASP.NET AJAX) prior to v2026.3.812 contains a vulnerability in the RadEditor file browser (DialogHandler UploadPaths). The root cause is insufficient integrity protection of dialog request parameters, which may allow an attacker who has obtained certain applicat...

CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

EUVD-2026-69898

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-18672 RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

EUVD-2026-69897

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

CVE-2026-18672

CVE-2026-18672 affects Progress Telerik UI for AJAX prior to v2026.3.812 . The vulnerability resides in the RadImageEditor control, where insufficient validation of client-supplied state allows an unauthenticated, network-based attacker to manipulate which file the control's image cache returns, ...

CVE-2026-40375

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 12:45:43+00:00| seen|...

Telerik UI for ASP.NET AJAX < 2026.2.708 Multiple Vulnerabilities

The version of Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.2.708. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout...

CVE-2026-14865

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion...