PT-2023-4225

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio versions prior to the fixed version in August 2023 Patch Tuesday Description The issue is related to a Denial of Service DoS vulnerability in .NET and Visual Studio. It can be exploited for DoS attacks with no user...

CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

PT-2023-9610

Name of the Vulnerable Software and Affected Versions .NET Core and Visual Studio affected versions not specified Description The issue is related to an uncontrolled consumption of resources, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the moment,...

CVE-2023-38178: Uncontrolled Resource Consumption

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-38180: Uncontrolled Resource Consumption

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-35390: Improper Neutralization of Special Elements used in a Command

.NET and Visual Studio Remote Code Execution Vulnerability...

KLA51717 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing...

PT-2023-4300

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio versions affected versions not specified Microsoft .NET versions affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio and the .NET platform, which...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

UBUNTU-CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

PT-2023-4295

Name of the Vulnerable Software and Affected Versions ASP.NET Core SignalR and Visual Studio affected versions not specified Description The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can potential...

PT-2023-5505 · Microsoft · Visual Studio Tools For Office Runtime

Name of the Vulnerable Software and Affected Versions: Visual Studio Tools for Office Runtime affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct...

UBUNTU-CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

Microsoft Visual Studio Code Extension Code Execution

The vulnerability of the editor extension for Microsoft Visual Studio Code’s GitHub Pull Requests and Issues extension is related to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Fedora 38 : dotnet6.0 (2023-feda45bc39)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-feda45bc39 advisory. This is the July 2023 update for .NET 6. It updates the SDK to 6.0.120 and Runtime to 6.0.20. https://github.com/dotnet/announcements/issues/262...

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4057)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4057 advisory. 7.0.109-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.109-1 - Update to .NET SDK 7.0.109 and...

Oracle Linux 8 : .NET / 7.0 (ELSA-2023-4058)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4058 advisory. 7.0.109-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.109-1 - Update to .NET SDK 7.0.109 and...

.NET Privilege Escalation

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

.NET Synchronization Bypass

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Blackbone - Windows Memory Hacking Library

Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules loaded...