Microsoft .NET Framework请求过滤绕过漏洞

Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework在处理内嵌请求时存在漏洞，攻击者可能利用此漏洞注入脚本代码执行。 .NET Framework没有正确的过滤内嵌的.NET请求，允许攻击者执行跨站脚本攻击。如果Web应用在向浏览器回显输入前仅仅依赖于.NET请求过滤的话，攻击者就可能通过特制的请求注入脚本代码。 Microsoft .NET Framework 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft .NET Framework SDK MSIL工具堆溢出漏洞

Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework SDK的ildasm在反汇编DLL文件时存在堆溢出漏洞，导致在反汇编特制的DLL时可能出现拒绝服务。 出现异常的部分如下： pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size; if pvReturn == NULL cmp dword ptr pvReturn,ebx jne $L19640+1 7C3423B6h pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size...

CVE-2006-3436

Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...

CVE-2006-3436

CVE-2006-3436 is a Microsoft .NET Framework 2.0 ASP.NET XSS vulnerability. The flaw affects ASP.NET controls that set AutoPostBack to true, allowing an attacker to inject client-side script via HTTP requests and potentially cause information disclosure or browser-side actions. Exploitation report...

CVE-2006-3436: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true"...

Microsoft .NET Framework contains a cross-site scripting vulnerability

Overview The Microsoft .NET Framework contains a cross-site scripting vulnerability that may allow an attacker to read or modify data in web pages and cookies. Description The Microsoft .NET Framework is a managed code programming model for Microsoft Windows operating systems. Microsoft ASP.NET i...

Microsoft ASP.NET Application Folder Information Disclosure Vulnerability

Description ASP.NET is prone to an information-disclosure vulnerability. This issue is due to a failure in the applications to properly validate user-supplied input. An attacker can exploit this issue to retrieve potentially sensitive information. Information retrieved may aid in further attacks...

CVE-2006-1300: Undefined Security Weakness

Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...

CVE-2006-1511

Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name...

CVE-2006-1511: Undefined Security Weakness

Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name...

Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow

Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to...

Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow

source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code...

Ideal BB.NET 1.3 XSS vuln

Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...

2021-11 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB5007298)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 KB5007298...

Security Update for Microsoft .NET Framework 4.5.2 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2954853)

Security Update for Microsoft .NET Framework 4.5.2 on Windows 7 and Windows Server 2008 R2 for x64-based Systems KB2954853...

2024-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system version 24H2 for x64 (KB5044030)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Update Rollup 3 for Windows Small Business Server 2011 Standard is available

None None...

Security update 1970-01-01

...

2022-05 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 for x64 (KB5013870)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2539635)

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain access to information. You can help protect your computer by installing this update from Microsoft. After you install this item, you may...