dotnet-gargoyle

dotnet-gargoyle A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique https://www.countercept.com/blog/gargoyle-memory-scanning-evasion-for-net/...

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...

clroxide

ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...

DotDumper

DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. At Black Hat Asia 2023, DotDumperGUI and DotDumperNative were published, along with version 1.1-stable of DotDumper. These three tools are meant to be used together,...

sc2elf

sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit ELF. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate...

DotNET_XorCryptor

DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...

CVE-2026-116477

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure...

CVE-2026-116476

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this...

CVE-2026-116477

The a2aproject a2a-dotnet component (up to version 1.0.0-preview2 ) contains an information exposure vulnerability within the Parser component. Specifically, the A2AJsonRpcProcessor.ProcessRequestAsync function in the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs can be manipulated to leak sensi...

CVE-2026-116477 a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure...

EUVD-2026-110072

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure...

CVE-2026-116476

A race condition vulnerability exists in a2aproject a2a-dotnet up to version 1.0.0-preview3 . The flaw is located in the TaskProjection.ApplyStatus function within the TaskProjection component. An attacker could perform a remote manipulation to trigger this condition. While a pull request to addr...

EUVD-2026-110071

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this...

CVE-2026-116476 a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this...

CVE-2026-116476 a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this...

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting

.NET Framework Information Disclosure Vulnerability id: CVE-2024-29059 info: name: .NET Framework - Leaking ObjRefs via HTTP .NET Remoting author: iamnoooob,rootxharsh,DhiyaneshDk,pdresearch severity: high description: .NET Framework Information Disclosure Vulnerability impact: | Attackers can...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

GHSA-9V8H-QQGM-4M35 vulnerabilities

Vulnerabilities for packages: py3-pytorch-cuda-13.0, mitmproxy, clickhouse, firefox, kubeflow-pipelines-visualization-server, pgadmin4, sentry-fips, wazuh-manager, graalvm, maxscale, bun-bootstrap, vllm-cuda-13.2, apache-beam-python-3.14-sdk, netbox-fips, dbgate, brotli, datahub-ingestion,...

CVE-2026-111497 vulnerabilities

Vulnerabilities for packages: py3-pytorch-cuda-13.0, mitmproxy, clickhouse, firefox, kubeflow-pipelines-visualization-server, pgadmin4, sentry-fips, wazuh-manager, graalvm, maxscale, bun-bootstrap, vllm-cuda-13.2, apache-beam-python-3.14-sdk, netbox-fips, dbgate, brotli, datahub-ingestion,...

GHSA-9V8H-QQGM-4M35 vulnerabilities

Vulnerabilities for packages: datawire-envoy, superset, dotnet-sdk-stage0, open-webui, dotnet, kubeflow-katib, firefox, pysilfont, zipkin, bun-bootstrap, howdy-yall, apicurio-registry, keycloak, envoy, clickhouse, duckdb, jitsucom-bulker, mitmproxy, brotli, bun, dotnet-sdk, brunsli, gftools,...