26 matches found
live-server-evil-crawler
Live Server Evil Crawler A GitHub Pages site for demonstrating the Live Server VSCode extension vulnerability CVE-2025-65717. Overview This tool demonstrates a vulnerability where Live Server allows requests from any origin, enabling malicious web pages to access the Live Server running on...
PT-2026-106088
Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description Manifests in deployments/aio/community/ and deployments/cli/community/ use fixed, publicly known default values for SECRET KEY and LIVE SERVER SECRET KEY that remain active if not overridden. While the...
bud-live-server (>=0.0.0, <=0.0.5), just-a-browserify-server (>=0.0.0, <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0, <=0.0.1)
just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: GHSA-HGJM-MPF2-R47F...
CVE-2026-84482 WWBN AVideo Cross-Site Request Forgery via get_domain() validation
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the getdomain and isSameDomain functions that fail to properly validate referer origins. Attackers can forge requests from sibling subdomains or unparseable long-gTLD origins to perform administrative...
Visual Studio Code Live Server Unauthorized Access
The vulnerability of the Live Server extension of the Visual Studio Code editor relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through a specially created HTML page...
CVE-2019-25352 Genivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal
Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows...
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio Code VS Code extensions that, if successfully exploited, could allow threat actors to steal local files and execute code remotely. The extensions, which have been collectively...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
Live Server security vulnerabilities
Live Server is a local development server personally developed by Ritwick Dey. Version 5.7.9 of Live Server contains a security vulnerability, which stems from user interactions with specially crafted HTML pages, potentially leading to file leaks...
CVE-2025-65717: Improper Neutralization of Input During Web Page Generation
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
PT-2026-8356
Name of the Vulnerable Software and Affected Versions Visual Studio Code Live Server version 5.7.9 Description An issue in Visual Studio Code Live Server allows attackers to exfiltrate files through user interaction with a specially crafted HTML page. Recommendations At the moment, there is no...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717
The Visual Studio Code Live Server extension (v5.7.9) is vulnerable to file exfiltration due to a lack of protective measures for website structures. The root cause allows a malicious actor to use a specially crafted HTML page to trigger user interaction, enabling the exfiltration of protected fi...
Exploit for CVE-2023-39848
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
