126 matches found
CVE-2025-53772
CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...
BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65020
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
Security Update for Microsoft ASP.NET Core (July 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate...
ASP.NET Core Denial of Service Vulnerability
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ROS-20260429-73-0044
A vulnerability in the ASP.NET Core software platform is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized attacker to perform a Denial of Service DoS attack over a network by allocating resources without limits or throttling. This can lead to the unavailability of the service for legitimate users...
Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513
Read how PatchDiff-AI uncovered the root cause of CVE-2026-21513 — an actively exploited MSHTML vulnerability — and how APT28 leveraged it in real-world attacks...
Microsoft HTTP.Sys security vulnerability
Microsoft HTTP.SYS is an HTTP application protocol developed by Microsoft Corporation. There are security vulnerabilities in Microsoft HTTP.SYS. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affected: Windows 10 Version 21H2 for...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-53772 poc for cve-2025-53772 CVE-2025-53772 - Mi...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-53772-standalone poc for cve-2025-53772 CVE-2025...
Linux Distros Unpatched Vulnerability : CVE-2025-24070
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2025-24070 Note that Nessus relies...
Microsoft Web Deploy code-related vulnerabilities
Microsoft Web Deploy is a scalable client-server tool from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Web Deploy. An attacker exploiting this vulnerability could execute code...
Microsoft Web Deploy < 10.0.2001 Remote Code Execution (CVE-2025-53772)
The version of Microsoft Web Deploy installed on the remote host is prior to 10.0.2001 It is, therefore, affected by a remote code execution vulnerability: - Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. CVE-2025-53772 Note that Ness...
Microsoft Web Deploy Installed (Windows)
Binary data microsoftwebdeployinstalled.nbin...
Microsoft ASP.NET Core security vulnerabilities
Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, Internet of Things applications, and mobile backends. A security vulnerability exists in Microsoft ASP.NE...
ASP.NET Core Authentication Bypass Privilege Escalation
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to the ability to bypass authentication. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...