ThreatVectr
Tag

#ASP.NET

2 stories taggedASP.NET.

Photoreal news-editorial overhead shot of a darkened security operations center desk, multiple monitors glowing blue with abstract vulnerability dashboards and
Vulnerabilities

Public exploit turns Telerik padding-oracle flaw into full server takeover

TantoSec's proof-of-concept chains a cryptographic weakness in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution, but only bites sites in a non-default setup that Progress patched in July.

4 min read
Vulnerabilities

Hard-coded ASP.NET machine keys in KnowledgeDeliver LMS abused to drop Godzilla, then Cobalt Strike

CVE-2026-5426 let attackers forge ViewState payloads against a Japanese LMS used across universities and corporate training portals. The bug was a zero-day before Digital Knowledge shipped a fix.

2 min read
© 2026 Threat Vectr