35647 matches found
Security Update for Microsoft ASP.NET Core (September 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-report...
PT-2026-90131
In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl sync slip devs stores bare net device pointers and takes no reference on them. sl sync and sl alloc walk that table from slip open under rtnl lock, while an entry is dropped by sl free netdev, which...
PT-2026-90115
In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc llc rmt delete rkey and smc llc save add link rkeys read the part of a v2 message that does not fit into the 44-byte union smc llc msg, and both bound themselve...
PT-2026-90243
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc xprt put to free listener on create failure svc rdma create calls kfreecma xprt when svc rdma create listen id fails. svc xprt init has already acquired a net namespace reference via get net track; kfree bypasses...
PT-2026-90119
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet connected work undoes its own work and returns without clearing login sent, so the connection still looks established. The next tbne...
Security Update for Microsoft .NET Core SDK (September 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges ove...
Security Update for Microsoft .NET Core (September 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...
Microsoft .NET Core SDK Information Disclosure Vulnerability
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
matt.net
Matt.Net 由 NCC Group Plc 开源发布 - http://www.nccgroup.com/ 由 Matt Lewis 开发，matt dot lewis at nccgroup dot com http://www.github.com/nccgroup/matt.net 根据 AGPL 许可发布。更多信息请参阅 LICENSE。 概述 Matt.Net 是围绕微软 CAT.NET 代码审计工具的简单 GUI 封装程序。 它可用于在指定文件夹中查找 .NET 二进制文件，并将在所有相关二进制文件上运行 CAT.NET。...
ncccodenavi
ncccodenavi NCC Code Navi，面向代码审查者的文本查看器与搜索器 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 开发者：Ollie Whitehouse，ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi 基于 AGPL 发布，更多信息请参阅 LICENSE Documentation...
dotNIET
.NIET .NIET 是一个 IDA Pro 插件。其目的是导入缺失的符号（通常有数千个），这些符号由 .NET Native 编译的二进制文件在运行时解析。这些符号位于 SharedLibrary.dll 中，但并未被该文件导出。 .NIET 已在以下平台上通过 IDA Pro 7.5（使用 python 3.8）进行了测试： Windows Linux 该插件目前支持以下 .NET Native 框架版本： 1.3 1.6 1.7 2.2 如果你遇到其他版本，请创建一个 issue。 安装 将这些文件复制到你的 IDA Pro 插件目录： root@kitploit:...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2019-18935
CVE-2019-18935 Nuclei 模板 - 赏金提交 此仓库包含一个完整、经过验证的 Nuclei 模板，用于检测 CVE-2019-18935（Telerik UI for ASP.NET AJAX 反序列化远程代码执行漏洞），专为 ProjectDiscovery 赏金计划创建。 🎯 概述 CVE-2019-18935 是 Progress Telerik UI for ASP.NET AJAX（版本 2011.1.315 至 2019.3.1023）中的一个严重 .NET 反序列化漏洞，允许未经身份验证的远程代码执行。此漏洞： ⚠️ CVSS 评分 ：9.8（严重） 🎭...
ysonet
YSoNet 是原始 YSoSerial.Net 的一个分支，目前由 @irsdl 维护。 网站：ysonet.net 或 ysonet.com（两者均指向本仓库）。 一个用于生成利用不安全 .NET 对象反序列化漏洞的 payload 的概念验证工具。 什么是 YSoNet YSoNet（原名 ysoserial.net）是一个工具集合，包含在常见 .NET 库中发现的实用程序及面向属性编程（property-oriented programming）“gadget 链”。在适当条件下，这些 gadget 链可以利用执行不安全对象反序列化的 .NET 应用程序。你提供一条命令和一个...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-M93F-WJ8C-RP8P vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
USN-8740-1 dotnet8, dotnet10 vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...
USN-8740-1: .NET vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...