12747 matches found
WordPress plugin AnyClip Luminous Studio has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...
CVE-2025-57910: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AnyClip Video Platform AnyClip Luminous Studio anyclip-media allows Stored XSS.This issue affects AnyClip Luminous Studio: from n/a through = 1.3.3...
PT-2025-39020
Name of the Vulnerable Software and Affected Versions AnyClip Luminous Studio versions through 1.3.3 Description The AnyClip Luminous Studio software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for th...
Microsoft Visual Studio Tools for Applications Installed (Windows)
Binary data microsoftvisualstudiotoolsforapplicationswininstalled.nbin...
CVE-2025-59553: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Coderz Studio Custom iFrame for Elementor custom-iframe allows DOM-Based XSS.This issue affects Custom iFrame for Elementor: from n/a through = 1.0.13...
CVE-2025-58271: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AnyClip Video Platform AnyClip Luminous Studio anyclip-media allows Stored XSS.This issue affects AnyClip Luminous Studio: from n/a through = 1.3.3...
PT-2025-38933
Name of the Vulnerable Software and Affected Versions AnyClip Luminous Studio versions through 1.3.3 Description The AnyClip Luminous Studio software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for th...
Demo User Digital Zoom Studio Plugin XSS
The vulnerability of the Demo User Digital Zoom Studio plugin in the WordPress content management system is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Security Update for Microsoft Visual Studio Code (September 2025)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.104.0. It is, therefore, affected by multiple vulnerabilities: - Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network. CVE-2025-55319 Note tha...
Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts
A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures. "In this activity, the group masqueraded as the current Chair of the Select Committee on...
Unspecified Vulnerability in Microsoft Visual Studio Code (CNVD-2025-22193)
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code that originates from insufficiently filtered or validated user-supplied data and can be exploited by an attacker to remotely execute arbitrary code...
CVE-2025-55319
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...
Metasploit Wrap-Up 09/12/25
New LightHouse Studio RCE module This week we've added a new module that exploits an unauthenticated template injection vulnerability CVE-2025-34300 in Sawtooth Software’s Lighthouse Studio, allowing arbitrary Perl execution via survey templates in versions prior to 9.16.14. This module has the...
CVE-2025-55319
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2025-55319
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2025-55319
CVE-2025-55319 corresponds to a remote code execution issue involving Agentic AI in Microsoft Visual Studio Code. The vulnerability allows an unauthenticated, network-based attacker to execute arbitrary code on the affected host via the Agentic AI functionality integrated with VS Code. The CVE is...
CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2025-55319: Improper Neutralization of Special Elements used in a Command
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...
