Tag
System.Security.Cryptography.Xml Spoofing Vulnerability (CVE-2026-96222)
1 CVEA spoofing vulnerability in the .NET System.Security.Cryptography.Xml library allows for certificate forgery and token spoofing via improper validation of KeyInfoX509Data serialized certificate formats.
CVE-2026-96230 ASP.NET Core Cross-Site Scripting Vulnerability
1 CVEAn unencoded exception reflection vulnerability in the Blazor WebAssembly development server allows remote attackers to perform cross-site scripting (XSS) via the unauthenticated /_framework/debug endpoint.
Suspicious Dynamic .NET Compilation via Csc.exe
1 rule 1 TTPAttackers utilize the C# compiler (csc.exe) to dynamically compile and execute malicious code in memory, enabling evasion of signature-based defenses and EDR hooks.
Access-Modifier Bypass in Scriban
3 TTPs 1 CVEScriban versions prior to 7.2.2 contain an access-modifier bypass in TypedObjectAccessor that allows unauthorized modification of private, internal, or init-only CLR object properties via template injection.
Datadog dd-trace-dotnet Improper W3C Baggage Header Parsing Leads to DoS
1 TTPA Denial of Service (DoS) vulnerability exists in Datadog tracing libraries (`dd-trace-dotnet`) due to improper parsing of W3C baggage HTTP headers, allowing remote, unauthenticated attackers to send requests with arbitrarily large baggage headers, causing unbounded CPU and memory consumption and leading to service unavailability for any HTTP service instrumented with affected library versions where baggage propagation is enabled by default. The issue, tracked as CVE-2026-50273, is resolved in version 3.43.0 and later.