Lucene search
+L

5 matches found

Kitploit
Kitploit
added 2026/09/13 4:59 p.m.11 views

wcfproxy

Compilación Puedes compilar la herramienta una vez y luego usar el binario resultante, o ejecutarla "como un script" el toolchain de Go la compilará sobre la marcha. Para desarrollo, la última opción es conveniente. Para uso productivo, se recomienda compilarlo una vez desde el directorio cli y...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/10 3:26 a.m.14 views

CVE-2025-66631

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

9.2CVSS7.8AI score0.00674EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 3:18 a.m.50 views

CVE-2025-66631

CSLA .NET prior to 6.0.0 is vulnerable to remote code execution during deserialization when using WcfProxy, which relies on the obsolete NetDataContractSerializer (NDCS). Supported details from multiple sources show that versions 5.5.4 and below are affected, while version 6.0.0 and above remove ...

9.8CVSS7.7AI score0.00674EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/12/09 3:18 a.m.15 views

CVE-2025-66631 CSLA .NET is vulnerable to Remote Code Execution via WcfProxy

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

9.2CVSS8AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/12/08 10:15 p.m.18 views

Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)

Impact Versions of CSLA .NET prior to version 6 allow the use of WcfProxy. WcfProxy uses the NetDataContractSerializer NDCS which has known vulnerabilities that can allow remote execution of code during deserialization. NDCS itself is considered obsolete, and you should avoid using WcfProxy or...

9.8CVSS7.4AI score0.00674EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder