42657 matches found
Malicious code in http-ws-listener (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70acc8a626218c5855ef656a6945f1f2018c0ff62c112d9b31bae5016fae49 [email protected] ships misc/configFetcher.js, which reconstructs a hidden Pastebin URL and the module names 'net' and 'childprocess' by...
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50525
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-50526
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
CVE-2026-50527
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...
CVE-2026-50528
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...
UBUNTU-CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-50659 .NET Spoofing Vulnerability
...
CVE-2026-50651
CVE-2026-50651 is a .NET Denial of Service vulnerability associated with an HTTP/2 SETTINGS/PING ACK flood that can lead to out-of-memory conditions. Public descriptions identify the impact as denial of service over a network, with a CVSS v3.1 base score of 7.5 (Network, Low attack complexity, No...
CVE-2026-50650
CVE-2026-50650 affects the .NET Framework, where improper control of code generation enables code injection that allows a local, unauthorized attacker to achieve privilege elevation. Root cause: improper handling of dynamic code generation within the framework. Impact per sources: local elevation...
CVE-2026-50650 .NET Framework Elevation of Privilege Vulnerability
...
CVE-2026-50648 .NET Framework Denial of Service Vulnerability
...
CVE-2026-50648
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...
CVE-2026-50646 .NET Framework Remote Code Execution Vulnerability
...
CVE-2026-50528
CVE-2026-50528 is a .NET security feature bypass vulnerability (Incorrect authorization) that enables a network attacker to bypass a security feature. The NCSC advisory and MITRE listing in the CVE community indicate it is categorized as a bypass of security measures with an 8.2–8.20 base score i...