idacode

IDACode IDACode를 사용하면 Visual Studio Code를 떠나지 않고 IDA 환경에서 Python 스크립트를 쉽게 실행하고 디버그할 수 있습니다. VS Code 확장 프로그램은 마켓플레이스에서 찾을 수 있습니다. IDACode는 아직 초기 단계이며 버그가 발생할 수 있습니다. 문제가 발생하면 새 이슈를 열어 주세요. 기능 속도 : 스크립트를 빠르게 생성하고 실행합니다. 디버깅 : 언제든지 Python 디버거를 연결할 수 있습니다. 호환성 : IDACode는 특정 방식으로 스크립트를 수정할 필요가 없습니다. 모...

APKLab

APKLab 궁극의 Android RE 경험을 바로 당신의 VS Code 안에서 누리세요. APKLab은 최고의 오픈소스 도구들을 완벽하게 통합합니다: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm 등을 VS Code에 통합하여 앱 분석에 집중하고 IDE를 벗어나지 않고 작업을 완료할 수 있습니다. 기능 앱 리소스 파일 디코드/편집/재빌드 APK를 Smali로/에서 디스어셈블/수정/재빌드 APK를 Java 소스로 디컴파일 smali-lsp 를 통한 탁월한 Smali 언어 지원 –...

muad-dib

インストール | 使い方 | 機能 | VS Code | CI/CD Version francaise MUAD'DIB とは？ npm と PyPI のサプライチェーン攻撃が急増しています。Shai-Hulud は 2025 年に 25,000 以上のリポジトリを侵害しました。既存のツールは脅威を検出しますが、対応には役立ちません。 MUAD'DIB は、22 の並列スキャナー（278 の検出ルール）、難読化解除エンジン 、モジュール間データフロー解析 、複合スコアリング （21 の複合ルール）、および gVisor/Docker サンドボックスを組み合わせて、npm および Py...

vscode-github-token-grab-extension

hello-world README インストールしないでください。これは私がvscode publishingをテストするための拡張機能です。...

CVE-2025-55319-PoC

参照: CVE-2025-55319 HTB「Checkpoint」チャレンジ向けの概念実証 PoC VS Code .vsix 拡張機能です。 インストールされると、拡張機能は自動的にアクティブ化され、攻撃者への隠れた PowerShell リバースシェルを生成します。 ⚠️ 許可された用途のみ。 これは CTF/ラボ用アーティファクトです。自分が所有するマシン、 または明示的にテストを許可されたマシン（例: HTBのターゲットボックス）に対してのみ展開してください。 仕組み extension/package.json — 拡張機能マニフェスト。"activationEvents":...

vscode-frida

VSCode用Fridaワークベンチ リポジトリ | Issues | インストール これはコミュニティ貢献プロジェクトであり、公式のFridaチームとは関係ありません。Fridaスクリプティング体験を向上させるためのVisual Studio Code用オープンソース拡張機能として、@CodeColoristによって開発・保守されています。 中文说明 前提条件 Python = 3.7 frida-tools Pythonパッケージ オプションの依存関係 libimobiledevice inetcatコマンドでSSHシェルを起動するため Windows版iTunes iOSのUSB接...

CVE-2026-19515: Improper Neutralization of Special Elements used in an OS Command

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

CVE-2026-19884

The CVE affects Eclipse Theia up to v1.69.0, where opening a folder can trigger source control integration and run git commands (e.g., git status) without user trust. A repository-local .git/config containing core.fsmonitor or similar settings can cause arbitrary commands to execute with the user...

CVE-2026-48122

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...

CVE-2026-48122 Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...

PT-2026-69159

Name of the Vulnerable Software and Affected Versions Ruby LSP VS Code extension versions prior to 0.10.4 Description Workspace-level settings in the extension can be manipulated via a .vscode/settings.json file in a malicious repository. An attacker can override the path to the Ruby executable,...

CVE-2026-48122: Improper Neutralization of Special Elements used in an OS Command

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler Gemfile used at startup. A malicious...

SUSE CVE-2026-35454

The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback tha...

cve-2026-47858 - HIGH - CVE-2026-47858: live information startup mode is vulnerable for remote code execution

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. This affects the live information feature across all environments Eclipse, Visual Studio Code, Theia, Cursor except the...

CVE-2026-44190: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability CWE-78 allows a remote attacker to execute unauthorized commands on a user's system. The issue occurs because the ansible.python.activationScript setting, intended for a virtual environme...

CVE-2026-59865: Improper Control of Generation of Code

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, kiota info read x-ms-kiota-info.languagesInformation. .dependencyInstallCommand plus dependency name and version values from an OpenAPI description and presented the spec-supplied command as Kiota's recommended...

UBUNTU-CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-49241: Improper Neutralization of Input During Web Page Generation

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

CVE-2026-50178: Improper Neutralization of Input During Web Page Generation

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side Angular Language Service VS Code extension configures the tooltip Markdown renderer with the isTrusted: true option located in client/src/client.ts. This setting instructs VS...