880 matches found
CVE-2022-40764
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in...
Command injection
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in...
CVE-2022-40764
CVE-2022-40764 affects Snyk CLI and related IDE plugins; before 1.996.0, it allowed arbitrary command execution, potentially via viewing untrusted files in VS Code. The original demonstration involved shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin before 1.19.1 and...
CVE-2022-40764
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in...
CVE-2022-40764
Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in...
Snyk CLI 操作系统命令注入漏洞
Snyk CLI is a build-time tool from Snyk USA for finding and fixing known vulnerabilities in projects. An operating system command injection vulnerability exists in versions of Snyk CLI prior to 1.996.0, which stems from allowing the execution of arbitrary commands and affects the Snyk IDE plugin...
Code Injection
Overview snyk is a advanced tool that scans and monitors projects for security vulnerabilities. Affected versions of this package are vulnerable to Code Injection. when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such a...
A Bootiful Podcast: Dr. Kris De Volder on Spring Tools, VS Code, and so much more
Hi, Spring fans! In this episode Josh Long @starbuxman talks to Dr. Kris De Volder, a longtime member of the Spring Tools team, about all the cool stuff hes worked on and is going to work on. And then we get knee deep into a discussion around building IDE integrations...
ide.mit.edu Cross Site Scripting vulnerability OBB-2864537
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in processingjs-ide (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb583c6cb0ba811d26cef7eae413b6a98d8f6cafdea493467478bf610369089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5468 Malicious code in processingjs-ide (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb583c6cb0ba811d26cef7eae413b6a98d8f6cafdea493467478bf610369089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2065 Malicious code in com.unity.ide.vscode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416753a6cbd610d25709fb4492bbc5bd5b1b083e6aa740bd60884c08f94e39c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.unity.ide.visualstudio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab3b1c12b92aed4105f6675cea06127b8d4956c11682591b0e35ac5cf976ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SAP NetWeaver Developer Studio code issue vulnerability
SAP NetWeaver Developer Studio is a Java part of the integrated development environment IDE of the German company SAP. SAP NetWeaver Developer Studio is vulnerable to a code issue that could be exploited by an attacker to cause a loss of confidentiality and integrity...
About the security content of Xcode 13.4
About the security content of Xcode 13.4 This document describes the security content of Xcode 13.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
JetBrains PyCharm has an unspecified vulnerability
JetBrains PyCharm is an integrated development environment IDE for the Python language from Czech company Jetbrains. security vulnerability exists in versions prior to JetBrains PyCharm 2022.1, which stems from exposing the debugger port to the internal network, no details of the vulnerability ar...
JetBrains Rider Code Injection Vulnerability
JetBrains Rider is a cross-platform integrated development environment IDE from Czech company Jetbrains. versions prior to JetBrains Rider 2022.1 contain a code injection vulnerability that could be exploited by attackers to execute native code via a link in the ReSharper quick documentation...
CVE-2022-29816
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible...