Oracle Linux 9 : .NET / 10.0 (ELSA-2026-92432)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92432 advisory. 10.0.114-1.0.1 - Add support for Oracle Linux 10.0.114-1 - Update to .NET SDK 10.0.114 and Runtime 10.0.14 - Resolves: RHEL-291744 Tenable has extracted the...

CVE-2022-30190

CVE-2022-30190 Follina A proof of concept PoC for CVE-2022-30190 Follina. Requirements Victim Windows 10 21H1 equivalent/earlier Security update KB5016616 uninstalled Attacker Microsoft .NET SDK Python 3.9 or later Configuration Edit config.xml to modify the attacker's server hostname and port...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-92427)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92427 advisory. 9.0.123-1.0.1 - Add support for Oracle Linux 9.0.123-1 - Update to .NET SDK 9.0.123 and Runtime 9.0.22 - Resolves: RHEL-291723 Tenable has extracted the...

Agent2Agent A2A .NET SDK information disclosure vulnerability

Agent2Agent A2A .NET SDK versions 1.0.0-preview2 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling in the A2AJsonRpcProcessor.ProcessRequestAsync function within the src/A2A.AspNetCore/A2AJsonRpcProcessor.cs file in the Parser component. ...

Agent2Agent A2A .NET SDK race condition vulnerability

Agent2Agent A2A .NET SDK versions 1.0.0-preview3 and earlier contain a race condition vulnerability. This vulnerability stems from a race condition in the TaskProjection.ApplyStatus function within the TaskProjection component, potentially enabling remote attacks...

Fedora 43 : dotnet8.0 (2026-aca7a82c77)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aca7a82c77 advisory. Update to .NET SDK 8.0.132 and Runtime 8.0.32 Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-...

Fedora 43 : dotnet9.0 (2026-22271e9271)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22271e9271 advisory. Update to .NET SDK 9.0.122 and Runtime 9.0.21 Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-...

BIT-DOTNET-SDK-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Fedora 44 : dotnet10.0 (2026-8b4cb2340a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8b4cb2340a advisory. Update to .NET SDK 10.0.111 and Runtime 10.0.11 Fixes:...

Fedora 44 : dotnet9.0 (2026-7cfd54a4c1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7cfd54a4c1 advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

Fedora 43 : dotnet10.0 (2026-91c099294a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-91c099294a advisory. Update to .NET SDK 10.0.111 and Runtime 10.0.11 Fixes:...

Fedora 43 : dotnet9.0 (2026-9c8770dffb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9c8770dffb advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

BIT-DOTNET-SDK-2026-62909 .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

BIT-DOTNET-SDK-2026-62900 .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

BIT-DOTNET-SDK-2026-58641 .NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

Fedora 44 : dotnet8.0 (2026-9aef53fa96)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9aef53fa96 advisory. Update to .NET SDK 8.0.129 and Runtime 8.0.29 Fixes:...

RHEL 8 : .NET 9.0 (RHSA-2026:41899)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41899 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 9 : .NET 8.0 (RHSA-2026:41894)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41894 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 10 : .NET 9.0 (RHSA-2026:41895)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41895 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Malicious Package

Overview OCI.DotNetSDK.Waf.Net is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...