15 matches found
ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root
Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...
Cakefile - Exposure Detection
Detected CoffeeScript Cakefile was exposing build tasks and project structure. !/usr/bin/env python3 -- coding: utf-8 -- """Detected CoffeeScript Cakefile was exposing build tasks and project structure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0.xxx, .NET 9.0.xxx and .NET 10.0.xxx. This advisory also provides guidance on what developers c...
GHSA-W3Q9-FXM7-J8FQ Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0.xxx, .NET 9.0.xxx and .NET 10.0.xxx. This advisory also provides guidance on what developers c...
Symlink Attack
Overview Microsoft.Build.Tasks.Core is a This package contains the Microsoft.Build.Tasks assembly which implements the commonly used tasks of MSBuild. Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gai...
EUVD-2025-14511
Malicious code in bioql PyPI...
External Control Of File Name Or Path
Microsoft.Build.Tasks.Core are vulnerable to External Control of File Name or Path. The vulnerability is due to external control of file name or path due to improper validation of input that allows an authorized attacker to manipulate file paths over a network...
External Control of File Name or Path
Overview Microsoft.Build.Tasks.Core is a This package contains the Microsoft.Build.Tasks assembly which implements the commonly used tasks of MSBuild. Affected versions of this package are vulnerable to External Control of File Name or Path due to the external control of file name or path. An...
Malicious code in uitk-build-tasks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110ea806ffdaa3d8ec8d3a6982b9fc4a07d6613b3b02f7ae5a7f35928095db0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-917 Malicious code in uitk-build-tasks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110ea806ffdaa3d8ec8d3a6982b9fc4a07d6613b3b02f7ae5a7f35928095db0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in uitk-build-tasks
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WS-2022-0280
All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. if Alice uses tzdata pipeline to package moment-timezone on her own for example via "grunt data:2014d", where "2014d" stands for the version of the tzdata to be used from IANA's website, and Alice let'...
Malicious Package
Overview angieslist-gulp-build-tasks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
Malware in angieslist-gulp-build-tasks
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
