PT-2021-19295

Name of the Vulnerable Software and Affected Versions vscode-rpm-spec extension versions prior to 0.3.2 Description The issue allows remote code execution via a crafted workspace configuration. Recommendations For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Visual Studio Code versions prior to 0.3.2 that allows remote code execution via a crafted workspace configuration...

CVE-2021-31414: Undefined Security Weakness

The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration...

Tax Phish Swims Past Google Workspace Email Security

A W2 tax email scam is circulating in the U.S. using Typeform, a popular software that specializes in online surveys and form building. The campaign is aimed at harvesting victims’ email account credentials, researchers said. According to Armorblox, the campaign also bypasses native Google...

CVE-2021-30503

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-30503

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-30503: Undefined Security Weakness

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

vscode-glsllint 安全漏洞

vscode-glsllint is an unofficial VSCode extension for open source. The extension supports lint's GLS OpenGL Shading Language. It uses the OpenGL and OpenGL ES shader validators to validate each shader type supported by glslangValidator. A security vulnerability exists in vscode-glsllint versions...

How to customize message for storefront where there is no receiver installed in client side

By default ,is there is no receiver or citrix workspace app installed at client side, after user opens the storefront URL,it will pop up below message .And sometimes administrator would like to customize the message to more specific one...

VSCodeVim Remote Code Execution Vulnerability

VSCodeVim is the Vim emulator for Visual Studio Code. A remote code execution vulnerability exists in VSCodeVim versions prior to 1.19.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-28832

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-28832

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-28832

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

Default configuration

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

Default configuration

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The CVE-2021-29261 entry concerns the unofficial Svelte extension for Visual Studio Code, with versions before 104.8.0 vulnerable to arbitrary code execution via a crafted workspace configuration. The affected component is the Svelte language-tools extension used in VS Code; the root cause is not...