GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: vitess, prism, renovate, saf, npm, code-server, node-gyp...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: vitess, prism, renovate, saf, npm, code-server, node-gyp...

CVE-2026-6734 vulnerabilities

Vulnerabilities for packages: renovate, vitess, code-server...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: vitess, prism, renovate, saf, npm, code-server, node-gyp...

CVE-2026-53655 vulnerabilities

Vulnerabilities for packages: sqlpad, npm, kibana, lerna, thingsboard, code-server, opensearch-dashboards, homepage, tensorflow-cpu-jupyter, kubeflow-katib, py3-captum, tileserver-gl-fips, py3-jupyterlab, opensearch-dashboards-fips, pnpm-stage0, prism, gemini-cli, renovate, graalvm,...

GHSA-VMF3-W455-68VH vulnerabilities

Vulnerabilities for packages: sqlpad, npm, kibana, lerna, thingsboard, code-server, opensearch-dashboards, homepage, tensorflow-cpu-jupyter, kubeflow-katib, py3-captum, tileserver-gl-fips, py3-jupyterlab, opensearch-dashboards-fips, pnpm-stage0, prism, gemini-cli, renovate, graalvm,...

GHSA-VMF3-W455-68VH vulnerabilities

Vulnerabilities for packages: pulumi, py3-jupyterlab, prism, tileserver-gl, renovate, pnpm-stage0, sqlpad, saf, npm, code-server, lerna, thingsboard, kubeflow-katib...

CVE-2026-53655 vulnerabilities

Vulnerabilities for packages: pulumi, py3-jupyterlab, prism, tileserver-gl, renovate, pnpm-stage0, sqlpad, saf, npm, code-server, lerna, thingsboard, kubeflow-katib...

CVE-2026-48779 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, argo-workflows, kibana, kubeflow-katib, langfuse-fips, wazuh-dashboard-fips, langfuse, code-server, py3-jupyterlab, drupal, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, arangodb, gitlab-rails-ce, homepage, gemini-cli,...

CVE-2026-53550 vulnerabilities

Vulnerabilities for packages: sqlpad, vitess, kibana, airflow, lerna, thingsboard, code-server, opensearch-dashboards, homepage, ts-patch, awx, unleash, foxx-cli, semaphore, tensorflow-cpu-jupyter, argo-workflows, kubeflow-katib, py3-captum, tileserver-gl-fips, langfuse, py3-jupyterlab,...

GHSA-H67P-54HQ-RP68 vulnerabilities

Vulnerabilities for packages: sqlpad, vitess, kibana, airflow, lerna, thingsboard, code-server, opensearch-dashboards, homepage, ts-patch, awx, unleash, foxx-cli, semaphore, tensorflow-cpu-jupyter, argo-workflows, kubeflow-katib, py3-captum, tileserver-gl-fips, langfuse, py3-jupyterlab,...

GHSA-96HV-2XVQ-FX4P vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, argo-workflows, kibana, kubeflow-katib, langfuse-fips, wazuh-dashboard-fips, langfuse, code-server, py3-jupyterlab, drupal, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard, arangodb, gitlab-rails-ce, homepage, gemini-cli,...

GHSA-H67P-54HQ-RP68 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, vitess, sqlpad, airflow, kubeflow-katib, pulumi, tileserver-gl, renovate, saf, kubeflow-pipelines, eslint, lerna, langfuse, ts-patch, prism, code-server, argo-workflows, thingsboard...

CVE-2026-48779 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, code-server, kubeflow-katib, langfuse...

CVE-2026-53550 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, vitess, sqlpad, airflow, kubeflow-katib, pulumi, tileserver-gl, renovate, saf, kubeflow-pipelines, eslint, lerna, langfuse, ts-patch, prism, code-server, argo-workflows, thingsboard...

GHSA-96HV-2XVQ-FX4P vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, code-server, kubeflow-katib, langfuse...

GHSA-W7JW-789Q-3M8P vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server...

CVE-2026-9277 vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server...

VS Code Extension Persistence

This module installs a malicious VS Code extension into the target's VS Code extensions directory. The extension executes the payload each time VS Code is launched, providing persistent code execution. Supports VS Code, VS Code Insiders, VSCodium, VS Code Server, and Cursor. Tested against 1.120....

VS Code Extension Persistence

This Metasploit module installs a malicious VS Code extension into the target's VS Code extensions directory. The extension executes the payload each time VS Code is launched, providing persistent code execution. Supports VS Code, VS Code Insiders, VSCodium, VS Code Server, and Cursor. Tested...