4368 matches found
AgileConfig 信任管理问题漏洞
AgileConfig is a lightweight configuration center for .NET Core-based development in the China .NET Core Community community. A trust management issue vulnerability exists in AgileConfig version 1.6.8, which stems from a hard-coded JWT Secret in the server that allows remote attackers to gain...
August 16, 2022-KB5016595 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
dotnet: External Entity Injection during XML signature verification
An information disclosure vulnerability exists in .NET Core and .NET. This issue can lead to unauthorized access to privileged information...
dotnet: External Entity Injection during XML signature verification
An information disclosure vulnerability exists in .NET Core and .NET. This issue can lead to unauthorized access to privileged information...
DotDumper: Automatically Unpacking DotNet based Malware
DotDumper: Automatically Unpacking DotNet Based Malware By Trellix · August 11, 2022 This blog was written by Max Kersten The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get...
DotDumper: Automatically Unpacking DotNet based Malware
DotDumper: Automatically Unpacking DotNet Based Malware By Max Kersten · August 11, 2022 The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get there are plenty, which is why the...
dotnet: External Entity Injection during XML signature verification
An information disclosure vulnerability exists in .NET Core and .NET. This issue can lead to unauthorized access to privileged information...
dotnet: External Entity Injection during XML signature verification
An information disclosure vulnerability exists in .NET Core and .NET. This issue can lead to unauthorized access to privileged information...
Microsoft .NET Core 安全漏洞
Microsoft .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected applications from Microsoft Corporation. A security vulnerability exists in Microsoft .NET Core. The following products and versions are affected: .NET 6.0, .NET...
August 9, 2022-KB5016373 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
August 9, 2022-KB5016737 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
August 9, 2022-KB5015732 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11
None None...
Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.7-alt1
Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...
Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.7-alt1
Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...
Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.7-alt1
Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - .NET 6.0.7 - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...
CVE-2022-27580
A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...
CVE-2022-27579
A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the...
CVE-2022-27579
A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the...
.NET 6.0 Update: July 12 2022 (KB5016405)
None None...
[SECURITY] Fedora 35 Update: dotnet3.1-3.1.420-1.fc35
.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...