4365 matches found
PT-2022-4631
Name of the Vulnerable Software and Affected Versions .NET 6.0 versions 6.0.0 through 6.0.2 .NET 5.0 versions 5.0.0 through 5.0.14 .NET Core 3.1 versions 3.1.0 through 3.1.22 Description The issue is related to incorrect clearing or release of resources, which can be exploited by a remote attacke...
PT-2022-4632
Name of the Vulnerable Software and Affected Versions .NET versions prior to 6.0.3 .NET 5.0 versions prior to 5.0.15 .NET Core 3.1 versions prior to 3.1.23 Description The issue is related to a buffer overflow due to unchecked input data, which can allow a remote attacker to execute arbitrary cod...
Microsoft .NET Core和Microsoft Visual Studio 代码注入漏洞
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
PT-2022-36855
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. Recommendatio...
Chinese APT group targets financial institutions in the campaign “Operation Cache Panda”
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Chinese threat actor APT10 conducted a series of large-scale supply chain attacks that exclusively targeted the financial software systems of Taiwanese financial institutions from the end of November 2021 until the middle of...
Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.22-alt1
3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34532: ASP.NET Core Information Disclosure Vulnerability...
Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1
3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.14-alt1
5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 5.0.14 with rpmgs script - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-41355 : .NET Core Information Disclosure Vulnerability - CVE-2021-34485 : .NET Core Information...
Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.14-alt1
5.0.14-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET 5.0.14 - February 8, 2022 - CVE-2022-21986 : .NET Denial of Service Vulnerability - CVE-2021-43877 : ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-41355 : .NET Core Information...
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.22-alt1
3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial...
Macrome - Excel Macro Document Reader/Writer For Red Teamers And Analysts
An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build --decoy-documen...
[SECURITY] Fedora 34 Update: dotnet-build-reference-packages-0-11.20220201git045b288.fc34
This contains references packages used for building .NET Core. This is not meant to be used by end-users...
February 15, 2022-KB5011267 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
Fedora: Security Advisory for dotnet-build-reference-packages (FEDORA-2022-e21253df87)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for dotnet-build-reference-packages (FEDORA-2022-e49dbaa4e5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-21986
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service...
dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service...
dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service...
dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service...
dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
A vulnerability was found in dotnet’s ASP.NET Core Krestel when pooling HTTP/2 and HTTP/3 headers. This flaw allows a remote, unauthenticated attacker to cause a denial of service...