GHSA-C399-9853-6JMJ vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, dotnet-sdk, promitor, dotnet...

GHSA-R955-8Q5J-3H83 vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, dotnet-sdk, promitor, dotnet...

GHSA-2FMV-RV2C-59X7 vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, ilspycmd, promitor, dotnet-sdk, dotnet...

GHSA-846F-F764-76MX vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, ilspycmd, promitor, dotnet-sdk, dotnet...

CVE-2026-70162 vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, ilspycmd, promitor, dotnet-sdk, dotnet...

CVE-2026-84008 vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, ilspycmd, promitor, dotnet-sdk, dotnet...

CVE-2026-96958 vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, dotnet-sdk, promitor, dotnet...

Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. The Blazor...

GHSA-QJPX-JQM5-H2C4 Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. The Blazor...

dotnet-gargoyle

dotnet-gargoyle A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique https://www.countercept.com/blog/gargoyle-memory-scanning-evasion-for-net/...

CVE-2026-105444

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444

A security flaw exists in dotnet eShop .NET 8 within the Ordering API component. Specifically, the GetOrderAsync function in the file src/Ordering.API/Apis/OrdersApi.cs is vulnerable to resource injection (CWE-99). By manipulating the OrderNumber argument, an attacker can achieve improper control...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

EUVD-2026-92801

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

ROS-20261005-73-0092

The vulnerability in dotnet10.0 is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-105444: Improper Control of Resource Identifiers

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

ROS-20261005-73-0100

The vulnerability in dotnet8.0 is related to a lack of source verification mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2026-106230

Name of the Vulnerable Software and Affected Versions dotnet eShop version .NET 8 Description An issue exists in the Ordering API component within the GetOrderAsync function located in the src/Ordering.API/Apis/OrdersApi.cs file. A remote attacker can manipulate the OrderNumber argument to cause...

ROS-20261005-73-0091

The vulnerability in dotnet9.0 is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...