CVE-2018-15122

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object such as DLL or EXE with an embedded resource file by clicking on the resource...

CVE-2018-15122

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object such as DLL or EXE with an embedded resource file by clicking on the resource...

Design/Logic Flaw

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object such as DLL or EXE with an embedded resource file by clicking on the resource...

CVE-2018-15122

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object such as DLL or EXE with an embedded resource file by clicking on the resource...

CVE-2018-15122

Progress Telerik JustAssembly (up to 2018.1.323.2) and JustDecompile (up to 2018.2.605.0) contain a vulnerability that enables code execution by decompiling a compiled .NET object (DLL/EXE) with an embedded resource file when the resource is clicked. The issue is documented across multiple source...

CVE-2018-15122: Improper Input Validation

An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object such as DLL or EXE with an embedded resource file by clicking on the resource...

PT-2018-12882

Name of the Vulnerable Software and Affected Versions Progress Telerik JustAssembly versions through 2018.1.323.2 Progress Telerik JustDecompile versions through 2018.2.605.0 Description An issue in Progress Telerik JustAssembly and JustDecompile makes it possible to execute code by decompiling a...

Exploit for Insufficiently Protected Credentials in Progress Sitefinity

Telewreck !Versionhttps://img.shields.io/badge/Version-v1...

vulnerability at mysonicwall.com that leads to Remote Code Execution (RCE)

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. CVE: CVE-2017-11317 Last updated: July 9, 2018, midnight...

Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities

The version of Telerik UI for ASP.NET AJAX installed on the remote Windows host is affected by multiple vulnerabilities in Telerik.Web.UI.dll. An unauthenticated, remote attacker can exploit this, via specially crafted data, to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Securit...

Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Arbitrary File Upload

Exploit Title: Telerik UI for ASP.NET AJAX RadAsyncUpload uploader Filename: RAUcrypto.py Github: https://github.com/bao7uo/RAUcrypto Date: 2018-01-23 Exploit Author: Paul Taylor / Foregenix Ltd Website: http://www.foregenix.com/blog Version: Telerik UI for ASP.NET AJAX CVE: CVE-2017-11317,...

Telerik UI for ASP.NET AJAX 2012.3.1308 < 2017.1.118 - Encryption Keys Disclosure

Exploit Title: Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker Filename: dpcrypto.py Github: https://github.com/bao7uo/dpcrypto Date: 2018-01-23 Exploit Author: Paul Taylor / Foregenix Ltd Website: http://www.foregenix.com/blog Version: Telerik UI for ASP.NET AJAX CVE: CVE-2017-9248 Vend...

Telerik UI for ASP.NET AJAX 2012.3.1308 2017.1.118 - Encryption Keys Disclosure

Telerik UI for ASP.NET AJAX 2012.3.1308 2017.1.118 - Encryption Keys Disclosure Exploit Title: Telerik UI for ASP.NET AJAX DialogHandler Dialog cracker Filename: dpcrypto.py Github: https://github.com/bao7uo/dpcrypto Date: 2018-01-23 Exploit Author: Paul Taylor / Foregenix Ltd Website:...

Exploit for Insufficiently Protected Credentials in Progress Sitefinity

dpcrypto !Languagehttps://img.shields.io/badge/Lang-Pytho...

Exploit for Inadequate Encryption Strength in Telerik Ui_For_Asp.Net_Ajax

RAUcrypto !Languagehttps://img.shields.io/badge/Lang-Pyth...

Progress Telerik UI for ASP.NET AJAX Encryption Vulnerability

ASP.NET AJAX is a control for ASP.NET. Progress Telerik UI is a UI user interface for ASP.NET controls that handle AJAX, developed by Telerik USA. A security vulnerability in Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX versions prior to R1 2017 and R2 versions prior to R2 2017 SP2 stem...

Progress Telerik UI for ASP.NET AJAX Arbitrary File Upload Vulnerability

ASP.NET AJAX is a control for ASP.NET. Progress Telerik UI is a UI user interface for ASP.NET controls that handle AJAX, developed by Telerik USA. A security vulnerability exists in versions of Progress Telerik UI for ASP.NET AJAX prior to R2 2017 SP2, which stems from the program failing to...

CVE-2017-11317

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...