35590 matches found
Security Update for Microsoft ASP.NET Core (September 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-report...
Microsoft .NET Core SDK Information Disclosure Vulnerability
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Security Update for Microsoft .NET Core (September 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...
Security Update for Microsoft .NET Core SDK (September 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges ove...
PT-2026-90243
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc xprt put to free listener on create failure svc rdma create calls kfreecma xprt when svc rdma create listen id fails. svc xprt init has already acquired a net namespace reference via get net track; kfree bypasses...
PT-2026-90119
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet connected work undoes its own work and returns without clearing login sent, so the connection still looks established. The next tbne...
PT-2026-90115
In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc llc rmt delete rkey and smc llc save add link rkeys read the part of a v2 message that does not fit into the 44-byte union smc llc msg, and both bound themselve...
PT-2026-90131
In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl sync slip devs stores bare net device pointers and takes no reference on them. sl sync and sl alloc walk that table from slip open under rtnl lock, while an entry is dropped by sl free netdev, which...
matt.net
Matt.Net Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Matt Lewis, matt punto lewis arroba nccgroup punto com http://www.github.com/nccgroup/matt.net Publicado bajo la licencia AGPL. Consulta LICENSE para más información. Visión general Matt.Net es un...
ncccodenavi
ncccodenavi NCC Code Navi, el visor de texto y buscador para revisores de código Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Publicado bajo AGPL,...
dotNIET
.NIET .NIET es un plugin de IDA Pro. Su propósito es importar símbolos faltantes normalmente unos pocos miles que son resueltos en tiempo de ejecución por binarios compilados con .NET Native. Estos símbolos se encuentran en SharedLibrary.dll y no son exportados por esta. .NIET ha sido probado en...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2019-18935
CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...
ysonet
YSoNet es un fork del YSoSerial.Net original, actualmente mantenido por @irsdl. Sitios: ysonet.net o ysonet.com ambos abren este repositorio. Una herramienta de prueba de concepto para generar payloads que explotan la deserialización insegura de objetos .NET. Qué es YSoNet YSoNet anteriormente...
GHSA-M93F-WJ8C-RP8P vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
USN-8740-1 dotnet8, dotnet10 vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...
USN-8740-1: .NET vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...