1219 matches found
Microsoft .NET Framework PE Loader Remote Buffer Overflow Vulnerability
Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...
Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities
Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities source: https://www.securityfocus.com/bid/24791/info Microsoft .NET Framework is prone to multiple NULL-byte injection vulnerabilities because it fails to adequately sanitize user-supplied data. An attacker can exploit...
Microsoft .NET Version Information Disclosure
By requesting a non-existent .aspx file on the remote web server, it is possible to obtain the exact version number of the remote .NET framework. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24243; scriptversion"1.14";...
Microsoft .NET Framework请求过滤绕过漏洞
Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework在处理内嵌请求时存在漏洞,攻击者可能利用此漏洞注入脚本代码执行。 .NET Framework没有正确的过滤内嵌的.NET请求,允许攻击者执行跨站脚本攻击。如果Web应用在向浏览器回显输入前仅仅依赖于.NET请求过滤的话,攻击者就可能通过特制的请求注入脚本代码。 Microsoft .NET Framework 2.0 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...
Microsoft .NET Framework SDK MSIL工具堆溢出漏洞
Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework SDK的ildasm在反汇编DLL文件时存在堆溢出漏洞,导致在反汇编特制的DLL时可能出现拒绝服务。 出现异常的部分如下: pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size; if pvReturn == NULL cmp dword ptr pvReturn,ebx jne $L19640+1 7C3423B6h pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size...
CVE-2006-3436
Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...
CVE-2006-3436
CVE-2006-3436 is a Microsoft .NET Framework 2.0 ASP.NET XSS vulnerability. The flaw affects ASP.NET controls that set AutoPostBack to true, allowing an attacker to inject client-side script via HTTP requests and potentially cause information disclosure or browser-side actions. Exploitation report...
Microsoft .NET Framework contains a cross-site scripting vulnerability
Overview The Microsoft .NET Framework contains a cross-site scripting vulnerability that may allow an attacker to read or modify data in web pages and cookies. Description The Microsoft .NET Framework is a managed code programming model for Microsoft Windows operating systems. Microsoft ASP.NET i...
Microsoft ASP.NET Application Folder Information Disclosure Vulnerability
Description ASP.NET is prone to an information-disclosure vulnerability. This issue is due to a failure in the applications to properly validate user-supplied input. An attacker can exploit this issue to retrieve potentially sensitive information. Information retrieved may aid in further attacks...
CVE-2006-1511
Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name...
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to...
Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow
source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code...
Ideal BB.NET 1.3 XSS vuln
Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...
Security Update for Microsoft .NET Framework 4.5.2 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2954853)
Security Update for Microsoft .NET Framework 4.5.2 on Windows 7 and Windows Server 2008 R2 for x64-based Systems KB2954853...
2021-11 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB5007298)
2021-11 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 KB5007298...
2024-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system version 24H2 for x64 (KB5044030)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB886903)
A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 x86 (KB2686830)
A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...
Security Update for Microsoft .NET Framework, Version 2.0 (KB922770)
A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...
Security Update for Microsoft .NET Framework, Version 2.0 (KB917283)
A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...