Tag: ASP.NET

Cracked circular vault seal representing the Telerik padding oracle breach
CSBadmin

Telerik UI exploit goes public for a chain Progress fixed in July

TantoSec's public tool turns a Telerik UI padding oracle into unauthenticated code execution for shops that skipped the July patch.

CSBadmin

Active Exploitation of KnowledgeDeliver LMS Flaw Deploys Memory-Only Web Shell

Mandiant discovered attackers exploiting a shared ASP.NET machine key flaw in KnowledgeDeliver LMS to deploy the BLUEBEAM in-memory web shell.