Lucene search
+L

5215 matches found

Amazon
Amazon
added 2024/12/12 12:00 a.m.9 views

Important: dotnet8.0

Issue Overview: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual Studio Denial of...

8.1CVSS8AI score0.03052EPSS
SaveExploits0
Amazon
Amazon
added 2024/12/12 12:00 a.m.7 views

Important: dotnet6.0

Issue Overview: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43485 Affected Packages: dotnet6.0 Issue...

7.5CVSS6.8AI score0.03052EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:00 a.m.17 views

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-776)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-776 advisory. .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual...

7.5CVSS8.1AI score0.03052EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:00 a.m.18 views

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2024-777)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-777 advisory. .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual...

8.1CVSS8.3AI score0.03052EPSS
SaveExploits0References10
The Hacker News
The Hacker News
added 2024/12/10 11:00 a.m.14 views

Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage

A suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as part of a campaign codenamed Operation Digital Eye. The intrusions took place from late June to mid-July 2024, cybersecurity companies...

9.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/11/23 12:12 p.m.451 views

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2024-35250-BOF The Beacon Object File BOF implementati...

7.8CVSS7.3AI score0.25222EPSS
SaveExploits7
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:00 a.m.13 views

The vulnerability of the Python extension for Visual Studio Code, a code editor from Visual Studio Code, relates to breaches of confidentiality boundaries, allowing the intruder to execute arbitrary code.

The vulnerability of the Python extension for the Visual Studio Code code editor involves breaching trust boundaries. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

10CVSS5.9AI score0.01234EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/11/20 7:09 a.m.16 views

BIT-DOTNET-SDK-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

9.8CVSS9.4AI score0.03591EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:08 a.m.18 views

BIT-DOTNET-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02595EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 7:08 a.m.17 views

BIT-DOTNET-SDK-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

7.5CVSS8.4AI score0.02595EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/11/19 9:36 p.m.485 views

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

5.3CVSS6.8AI score0.01962EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2024/11/19 8:57 a.m.1292 views

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...

8.8CVSS9.1AI score0.14179EPSS
SaveExploits2
CNVD
CNVD
added 2024/11/15 12:00 a.m.21 views

Microsoft Visual Studio Code Python Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code Python Extension, which can be exploited by an attacker to execute arbitrary code on a system...

8.8CVSS8.1AI score0.01234EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:00 a.m.25 views

Security Update for Microsoft Visual Studio Code Remote SSH Extension (November 2024)

The Microsoft Visual Studio Code Remote SSH Extension is prior to version 0.115.1. It is, therefore, affected by an undisclosed elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

7.1CVSS7.2AI score0.00429EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/11/15 12:00 a.m.34 views

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-48759)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker can exploit...

6.7CVSS6.6AI score0.0075EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:00 a.m.38 views

Security Update for Microsoft Visual Studio Code Python Extension (November 2024)

The Microsoft Visual Studio Code Python Extension is prior to version 2024.18.2. It is, therefore, affected by an undisclosed remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

8.8CVSS8.7AI score0.01234EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.10 views

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

6.8CVSS5.4AI score0.0075EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.11 views

The vulnerability of the Visual Studio Code Remote – SSH extension of the code editor Visual Studio Code, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Visual Studio Code Remote – SSH extension of the code editor Visual Studio Code is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

7.1CVSS5.6AI score0.00429EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/11/13 12:00 a.m.21 views

Security Updates for Microsoft Visual Studio Products (November 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to a .NET vulnerable webapp or loading a specially...

9.8CVSS8.3AI score0.03591EPSS
SaveExploits0References9
Talos Blog
Talos Blog
added 2024/11/12 11:11 p.m.35 views

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...

9.9CVSS10AI score0.84108EPSS
SaveExploits5
Rows per page
Query Builder