live-server-evil-crawler

Live Server Evil Crawler A GitHub Pages site for demonstrating the Live Server VSCode extension vulnerability CVE-2025-65717. Overview This tool demonstrates a vulnerability where Live Server allows requests from any origin, enabling malicious web pages to access the Live Server running on...

The vulnerability of the Live Server extension of the Visual Studio Code source editor allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Live Server extension of the Visual Studio Code editor relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through a specially created HTML page...

CVE-2019-25352 Genivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal

Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows...

Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs

Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio Code VS Code extensions that, if successfully exploited, could allow threat actors to steal local files and execute code remotely. The extensions, which have been collectively...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717

The Visual Studio Code Live Server extension (v5.7.9) is vulnerable to file exfiltration due to a lack of protective measures for website structures. The root cause allows a malicious actor to use a specially crafted HTML page to trigger user interaction, enabling the exfiltration of protected fi...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717: Improper Neutralization of Input During Web Page Generation

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

Live Server 安全漏洞

Live Server is a local development server personally developed by Ritwick Dey. Version 5.7.9 of Live Server contains a security vulnerability, which stems from user interactions with specially crafted HTML pages, potentially leading to file leaks...

PT-2026-8356

Name of the Vulnerable Software and Affected Versions Visual Studio Code Live Server version 5.7.9 Description An issue in Visual Studio Code Live Server allows attackers to exfiltrate files through user interaction with a specially crafted HTML page. Recommendations At the moment, there is no...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

Exploit for CVE-2023-39848

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

MAL-2025-16256 Malicious code in bud-live-server (npm)

The package bud-live-server was found to contain malicious code...

Malicious code in bud-live-server (npm)

The package bud-live-server was found to contain malicious code...

SQL Injection Vulnerability in Shenzhen Siliconware Sewise Live Server

SEWISE is a streaming media cloud computing company engaged in streaming media encoding, distribution and storage of audio and video. sewise live streaming server is a product of this company. A SQL injection vulnerability exists in SEWISE live server. An attacker can exploit the vulnerability to...

CVE-2005-3900

Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service instability or crash, as demonstrated using an alpha release build of Flash Player 8.5 build 133...

CVE-2005-3900

CVE-2005-3900 affects Macromedia Breeze Communication Server and Breeze Live Server (version 5.1 and earlier). The vulnerability arises from insufficient validation of certain RTMP data, which can cause a denial of service (instability or crash). The NVD description notes this was demonstrated wi...