Telerik UI Padding‑Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

Overview Security firm TantoSec has published a proof‑of‑concept exploit chain that turns an AES‑CBC padding oracle in Telerik UI for ASP.NET AJAX into unauthenticated remote […]