TantoSec's Telerik UI PoC demonstrates unauthenticated RCE under specific non-default conditions; fixes shipped in July.
Telerik UI for ASP.NET AJAX flaw chain allows unauthenticated remote code execution by exploiting a padding oracle and ...