83 matches found
GAP-Burp-Extension
Sobre - v6.3 Esta é uma evolução da extensão original getAllParams para o Burp. Não só encontra mais parâmetros potenciais para você investigar, mas também encontra links potenciais para testar esses parâmetros e produz uma wordlist específica para o alvo para usar em fuzzing. A documentação...
CVE-2026-54981
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-56605
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-54981
The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
PT-2026-70832
Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...
PT-2026-70390
Name of the Vulnerable Software and Affected Versions Visual Studio Code - Python extension affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-35050
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, thi...
EUVD-2026-14478
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
CVE-2026-26209
cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion when decoding deeply nested CBOR structures. This vulnerability affects both the...
GHSA-WCJ4-JW5J-44WH CBORDecoder reuse can leak shareable values across decode calls
Summary When a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory and can be accessed by subsequent CBOR messages using the sharedref tag 29. This allows an attacker-controlled message to read data from previously decoded...
EUVD-2020-9117
Malware in sbrugna...
EUVD-2020-8934
Malware in sbrugna...