6151 matches found
PT-2024-3008
Name of the Vulnerable Software and Affected Versions .NET Framework versions affected versions not specified .NET versions affected versions not specified Visual Studio versions affected versions not specified Description The issue is related to the use of memory after it has been freed, which c...
Security Updates for Microsoft Visual Studio Products (April 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote code execution vulnerability exists in .NET, .NET Framework, and Visual Studio. An unauthenticated, remote attacker can exploit this to bypass...
ADOKit - Azure DevOps Services Attack Toolkit
Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...
Rocky Linux 8 : .NET 8.0 (RLSA-2024:1311)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1311 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
Rocky Linux 8 : .NET 7.0 (RLSA-2024:1308)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1308 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
WiX based installers are vulnerable to binary hijack when run as SYSTEM
Summary Burn uses an unprotected C:\Windows\Temp directory to copy binaries and run them from there. This directory is not entirely protected against low privilege users. Details When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to dro...
PT-2024-40286
Name of the Vulnerable Software and Affected Versions: Burn versions affected versions not specified Description: The issue concerns an Elevation of Privilege Vulnerability where a low-privileged user can hijack binaries in an unprotected path, specifically the C:WindowsTemp directory, to elevate...
Code Reviewer
Reviews code Module Options msf use exploit/multi/fileformat/visual/studiovsixexec msf undefinedstudiovsixexec show actions ...actions... msf undefinedstudiovsixexec set ACTION msf undefinedstudiovsixexec show options ...show and set options... msf undefinedstudiovsixexec run This module requires...
The vulnerability of Microsoft Visual Studio Code’s editor, related to access control deficiencies, allows attackers to escalate their privileges.
The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Oracle Linux 9 : .NET / 8.0 (ELSA-2024-1310)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1310 advisory. - 8.0.103-2.0.1 - Update to .NET SDK 8.0.103 and Runtime 8.0.3 - Disable checking the signature of the last certificate in a chain if the certificate is...
Oracle Linux 9 : .NET / 7.0 (ELSA-2024-1309)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1309 advisory. - 7.0.117-1.0.1 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Port revert 'Disable implicit rejection for RSA PKCS1 95217' patch - 7.0.116-1.0.1 - Update to...
Oracle Linux 8 : .NET / 7.0 (ELSA-2024-1308)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1308 advisory. 7.0.117-1.0.1 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Port Revert 'Disable implicit rejection for RSA PKCS1 95217 patch Tenable has extracted the...
Oracle Linux 8 : .NET / 8.0 (ELSA-2024-1311)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1311 advisory. 8.0.103-1.0.1 - Update to .NET SDK 8.0.103 and Runtime 8.0.3 - Backport MSBuild locale fix Tenable has extracted the preceding description block directly from t...
The vulnerability of Microsoft Visual Studio, a software development tool, and the .NET software platform lies in the lack of adequate testing of input data. This allows attackers to trigger service failures.
The vulnerability of Microsoft Visual Studio, a software development tool, and the .NET software platform exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...
AlmaLinux 9 : .NET 8.0 (ALSA-2024:1310)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1310 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
AlmaLinux 8 : .NET 8.0 (ALSA-2024:1311)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1311 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
