10368 matches found
windyridgestudio.ca Improper Access Control vulnerability OBB-3792176
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Oracle Linux 8 : dotnet6.0 (ELSA-2023-7258)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7258 advisory. 6.0.125-1.0.2 - Add strict BuildRequires on 6.0.125-1.0.1 6.0.125-1.0.1 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 Tenable has extracted the...
The vulnerability of Visual Studio Code’s source editor is related to inadequate control over code generation, allowing attackers to execute arbitrary code.
The vulnerability of the Visual Studio Coded source editor is related to inadequate control over code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Oracle Linux 8 : dotnet7.0 (ELSA-2023-7256)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7256 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...
ROS-20231115-04
Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...
Sandwich attack on buy()
Lines of code Vulnerability details Impact Function Market:buy does not check or take in a minimum buy amount. This makes users' funds vulnerable to sandwich attacks. buy will increase shareDataid.tokenCount, and thus change the exchange rate of share price. price, fee =...
Microsoft Visual Studio Denial of Service Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A denial of service vulnerability exists in Microsoft Visual Studio. An attacker could exploit this...
Security Updates for Microsoft Visual Studio Products (November 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of...
EzViz Studio 2.2.0 DLL Hijacking
PoC: DLL Hijacking via EzViz Studio Reported by EAFZ from Pythongoras Author: EAFZ aka myantti3m CVE: CVE-2023-41613. Test Environment: OS: Windows 11 Pro 64 bit10.0, Build 2261 EzViz Studio version: 2.2.0 Technical Description 1. Technical Description EzvizStudio.exe searches for a DLL called...
Microsoft .NET Framework Multiple Vulnerabilities (KB5031989)
This host is missing an important security update according to Microsoft KB5031989 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6480-1)
The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6480-1 advisory. Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possib...
Microsoft .NET Framework Multiple Vulnerabilities (KB5032338)
This host is missing an important security update according to Microsoft KB5032338 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework Multiple Vulnerabilities (KB5032339)
This host is missing an important security update according to Microsoft KB5032339 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
Privilege escalation
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
GHSA-C3HF-8VGX-72RH Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0 RC2. This advisory also provides guidance on what developers can do...
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0 RC2. This advisory also provides guidance on what developers can do...
CVE-2023-36049
CVE-2023-36049 affects Microsoft .NET, .NET Framework and Visual Studio, enabling a remote authenticated attacker to gain elevated privileges by injecting commands via the FTP server (elevation of privilege). Public references in connected advisories confirm the vulnerability and provide distribu...
