721 matches found
CVE-2024-7679
Summary: CVE-2024-7679 affects Progress Telerik UI for WinForms prior to 2024 Q3 (2024.3.924). The root cause is improper neutralization of hyperlink elements, enabling a command injection attack. What’s affected: Progress Telerik UI for WinForms versions before 2024.3.924. Impact: potential comm...
CVE-2024-7679 Improper neutralization special element in hyperlinks
In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...
Telerik UI 代码问题漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...
PT-2024-38934 · Telerik · Telerik Ui For Wpf
Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: The issue is related to an insecure deserialization vulnerability, which allows for a code execution attack. This vulnerability can be exploited remotely. Recommendations: F...
PT-2024-38501 · Progress · Telerik Ui For Winforms
Name of the Vulnerable Software and Affected Versions: Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924 Description: A command injection attack is possible through improper neutralization of hyperlink elements. This issue affects earlier versions of Progress Telerik UI for WinForms,...
PT-2024-38429 · Telerik · Telerik Ui For Wpf
Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: A command injection attack is possible due to improper neutralization of hyperlink elements. This issue arises from the improper handling of certain elements, allowing for...
Telerik UI 命令注入漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI versions prior to 2024 Q3 2024.3.821, which originates from a command injection attack that can be initiated by disrupting the middle and...
Telerik UI 代码问题漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...
Telerik UI 命令注入漏洞
Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A command injection vulnerability exists in Telerik UI 2024 Q3 2024.3.806 and earlier versions, which stems from a command injection attack that can be performed via improper neutralization of...
PT-2024-7990 · Telerik · Telerik Report Server
Name of the Vulnerable Software and Affected Versions: Telerik Report Server versions prior to 2024 Q3 10.2.24.924 Description: The issue is related to an insecure type resolution vulnerability, allowing a remote code execution attack through object injection. This vulnerability can be exploited ...
Telerik Report Server Auth Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Telerik Report Server Auth Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in Telerik Report Server...
Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024
No d...
PT-2024-7989 · Progress · Telerik Reporting
Name of the Vulnerable Software and Affected Versions: Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924 Description: The issue is related to insecure expression evaluation, allowing for object injection and potentially leading to code execution attacks. This can be exploited by...
The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.
The vulnerability of the Telerik Report Server reporting management software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Telerik Report Server’s reporting control software lies in its deserialization mechanism flaws, which allow attackers to execute arbitrary code.
The vulnerability of the Telerik Report Server reporting control panel is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
Progress Telerik Reporting < 2024 Q2 (18.1.24.709) Object Injection
The version of Progress Telerik Reporting installed on the remote Windows host is prior to 2024 Q2 18.1.24.709. It is, therefore, affected by an object injection vulnerability: - In Progress® Telerik® Reporting versions prior to 18.1.24.709, an object injection attack is possible through an...
Progress Telerik Report Server Insecure Deserialization (CVE-2024-6327)
The version of Progress Telerik Report Server installed on the remote host is affected by an insecure deserialization vulnerability, as follows: - In Progress Telerik Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserializatio...
CVE-2024-6327
In Progress® Telerik® Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserialization vulnerability...
