4257 matches found
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...
.NET: .NET: Network Spoofing Vulnerability
A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.18-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.18-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.18-1.hum1 aarch64, x8664...
CVE-2026-45591 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-F8H2-VMM9-QHJ6 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-7Q4V-2MR6-5GPX vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-45491 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-F8H2-VMM9-QHJ6 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-45491 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-45591 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-7Q4V-2MR6-5GPX vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
PT-2026-60174
The latest Microsoft Patch Tuesday included my first 3 CVEs 🥳 All RCEs, fixed in .NET 10.0.10. https://t.co/DDEbS7cQPd CVE-2026-56158 which is 404, for some reason, CVE-2026-50646 co-attributed to @Ky0toFu who found it faster than I did, and CVE-2026-50649...
PT-2026-60362
Name of the Vulnerable Software and Affected Versions Datadog .NET Tracer versions prior to 3.43.0 Description Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing limits on the number of items or the total byte size during...
CVE-2026-50651
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
Malicious Package
Overview gta5rp-x-x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package attempts to impersonate legitimate gaming utilities, bots, or performance panels, it is entirely malicious and has no connection to t...
CVE-2026-50650
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
CVE-2026-50650
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
CVE-2026-50527
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...