Telerik UI for ASP.NET AJAX flaw chain allows unauthenticated remote code execution by exploiting a padding oracle and loading a malicious DLL.