idacode

IDACode IDACode를 사용하면 Visual Studio Code를 떠나지 않고 IDA 환경에서 Python 스크립트를 쉽게 실행하고 디버그할 수 있습니다. VS Code 확장 프로그램은 마켓플레이스에서 찾을 수 있습니다. IDACode는 아직 초기 단계이며 버그가 발생할 수 있습니다. 문제가 발생하면 새 이슈를 열어 주세요. 기능 속도 : 스크립트를 빠르게 생성하고 실행합니다. 디버깅 : 언제든지 Python 디버거를 연결할 수 있습니다. 호환성 : IDACode는 특정 방식으로 스크립트를 수정할 필요가 없습니다. 모...

vscode-frida

VSCode용 Frida Workbench 저장소 | 이슈 | 설치 이 프로젝트는 커뮤니티 기여 프로젝트로, 공식 Frida 팀과는 관련이 없습니다. @CodeColorist가 Visual Studio Code용 오픈소스 확장 프로그램으로 개발 및 유지 관리하며, Frida 스크립팅 경험을 향상시키기 위한 것입니다. 中文说明 사전 요구 사항 Python = 3.7 frida-tools 파이썬 패키지 선택적 의존성 libimobiledevice inetcat 명령으로 SSH 셸을 시작하기 위한 용도 Windows의 iTunes...

vscode-github-token-grab-extension

hello-world README インストールしないでください。これは私がvscode publishingをテストするための拡張機能です。...

muad-dib

설치 | 사용법 | 기능 | VS Code | CI/CD Version francaise MUAD'DIB를 선택해야 하는 이유는? npm 및 PyPI 공급망 공격이 폭발적으로 증가하고 있습니다. Shai-Hulud는 2025년에 25,000개 이상의 저장소를 손상시켰습니다. 기존 도구는 위협을 탐지하지만 대응을 돕지는 않습니다. MUAD'DIB는 22 개의 병렬 스캐너278개 탐지 규칙, 난독화 해제 엔진 , 모듈 간 데이터 흐름 분석 , 복합 점수 산정21개 복합 규칙, 그리고 gVisor/Docker 샌드박스를 결합하여 n...

APKLab

APKLab 究極のAndroidリバースエンジニアリング体験をVS Codeの中で。 APKLabは、最先端のオープンソースツールをシームレスに統合します：Apktool、smali-lsp、Jadx、uber-apk-signer、apk-mitmなど。優れたVS Codeに統合し、IDEから離れることなくアプリ分析に集中して完了できます。 機能 アプリのリソースファイルのデコード/編集/リビルド APKをSmaliとの間で逆アセンブル/改造/リビルド APKをJavaソースにデコンパイル 優れたSmali言語サポート（smali-lsp）—...

CVE-2025-55319-PoC

참고: CVE-2025-55319 HTB "Checkpoint" 챌린지를 위한 개념 증명 VS Code .vsix 확장 프로그램입니다. 설치되면 확장 프로그램이 자동으로 활성화되어 공격자에게 숨겨진 PowerShell 리버스 셸을 생성합니다. ⚠️ 승인된 사용만 가능합니다. 이는 CTF/랩 아티팩트입니다. 본인이 소유하거나 명시적으로 테스트가 승인된 머신예: HTB 대상 박스에만 배포하십시오. 작동 방식 extension/package.json — 확장 프로그램 매니페스트. "activationEvents": ""를 사용하여 V...

CVE-2026-19884

The CVE affects Eclipse Theia up to v1.69.0, where opening a folder can trigger source control integration and run git commands (e.g., git status) without user trust. A repository-local .git/config containing core.fsmonitor or similar settings can cause arbitrary commands to execute with the user...

CVE-2026-48122

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...

cve-2026-47858 - HIGH - CVE-2026-47858: live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. This affects the live information feature across all environments Eclipse, Visual Studio Code, Theia, Cursor except the...

UBUNTU-CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-46870

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the...

Cross-site Scripting (XSS)

Overview symfony/symfony is a PHP framework for web applications and a set of reusable PHP components. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the CodeExtension::fileExcerpt function in WebProfiler. An attacker can execute arbitrary JavaScript code in the...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the CodeExtension::fileExcerpt function in WebProfiler. An attacker can execute arbitrary JavaScript code in the context of affected users by sending a specially crafted non-PHP files with \n that avoids HTM...

MAL-2026-3371 Malicious code in pycacheopt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cf50eae305079227b5283e08547cc201f941624c95e49460c3e6544cdd1e221b The extension module hides code that in specific circumstances executes given code. The malicious action is hidden only in the extension module with the...

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have overwritten existing tags, including v2.1.20 and...

CVE-2026-35454

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback tha...

CVE-2026-35454

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback tha...

CVE-2026-35454 Code Extension Marketplace has a Zip Slip Path Traversal

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback tha...

EUVD-2026-19537

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback tha...