ILSpy

ILSpy ILSpy is the open-source, cross-platform .NET assembly browser and decompiler. The desktop UI runs on Windows, Linux, and macOS built on Avalonia. Download: latest release | latest CI build master | Microsoft Store RTM versions only Decompiler Frontends Aside from the cross-platform desktop...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

CsWhispers

CsWhispers Source generator to add D/Invoke and indirect syscall methods to a C project. Quick Start Add the latest NuGet package to your project and allow unsafe code. Exe net481 enable enable 12 true true Create a file in your project called CsWhispers.txt and set its build action properties to...

AdvSim.Cryptography

AdvSim.Cryptography The AdvSim.Cryptography NuGet contains a set of cryptographic wrapper functions which are reusable, configured with sane defaults and are easy to use. Further details are available under the different subheadings below. Symmetric Key Material Generation AES Triple DES RC4 RC2...

donutCS

donutCS .NET Core version of donut shellcode generator. https://vimeo.com/369739318 Note: I simply glued a bunch of things together for a more personally useable version. TheWover and Odzhan did all the hard work. Install Confirmed working on Linux, Mac and Windows Kali Install Instructions Usage...

seal-security-nuget-demo-net7

Browser + CLI Demo NuGet/C — .NET 7 Edition Why a .NET 7 fork? This is a retargeted fork of the canonical seal-security-nuget-demo which targets net9.0. The exploit story, the controllers, and the sealed-package list are identical — only theTargetFramework differs. It exists because most enterpri...

NuReaper

NuReaper — NuGet Package Security Scanner ⚠️ Work in Progress — The project is actively developed. Core scanning engine is rebulding NuReaper is a .NET 8 backend API that automatically analyzes the security of NuGet packages. You provide a link to any NuGet package, and the system recursively...

CVE-2026-97665

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...

CVE-2026-97665

A missing authorization check in Nexus Repository 3 's NuGet Components API upload path allows users with only read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository. This bypasses the standard write-permission checks for ordinary package uploads. ...

CVE-2026-97665 Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...

EUVD-2026-102152

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...

ROOT-APP-NUGET-CVE-2026-40894 CVE-2026-40894 in OpenTelemetry.Api - Patched by Root

Root has patched CVE-2026-40894 in the OpenTelemetry.Api package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root

Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root

Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...

CLEANSTART-2025-EH90452 NuGet Client Remote Code Execution Vulnerability

CVE-2023-29337 affects multiple packages. NuGet Client Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2024-PD73825 NuGet Client Elevation of Privilege Vulnerability

CVE-2022-41032 affects multiple packages. NuGet Client Elevation of Privilege Vulnerability See references for individual vulnerability details...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlsa-2022_5046)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225046 advisory. dotnet: NuGet Credential leak due to loss of control of third party symbol server domain CVE-2022-30184 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlsa-2022_6911)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226911 advisory. dotnet: Nuget cache poisoning on Linux via world-writable cache directory CVE-2022-41032 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc (crlsa-2022_6913)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226913 advisory. dotnet: Nuget cache poisoning on Linux via world-writable cache directory CVE-2022-41032 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-3.1 / aspnetcore-targeting-pack-3.1 / etc (crlsa-2022_5061)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225061 advisory. dotnet: NuGet Credential leak due to loss of control of third party symbol server domain CVE-2022-30184 Tenable has extracted the preceding description block direct...