CVE-2025-58353 Promptcraft Forge Studio: Complete Sanitizer Bypass Enables XSS via Overlapping Patterns

Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as replace/javascript:/gi, ''. Because the package uses multi-character tokens and each replacement ...

BIT-POWERSHELL-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...

BIT-POWERSHELL-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

BIT-POWERSHELL-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

BIT-POWERSHELL-2024-21392 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-POWERSHELL-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability...

BIT-POWERSHELL-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

BIT-POWERSHELL-2022-23267 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-POWERSHELL-2021-41355 .NET Core and Visual Studio Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability...

PT-2025-36092

Name of the Vulnerable Software and Affected Versions: Promptcraft Forge Studio affected versions not specified Description: Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. The software’s input sanitization process, which utilizes regex...

Promptcraft Forge Studio 安全漏洞

Promptcraft Forge Studio is a developer toolkit for Marcelo Tessaro Individual Developer. A security vulnerability exists in Promptcraft Forge Studio that stems from improperly cleaning up user input using a regular expression blacklist, which could lead to the execution of a malicious payload...

PT-2025-36093

Name of the Vulnerable Software and Affected Versions: Promptcraft Forge Studio affected versions not specified Description: Promptcraft Forge Studio, a toolkit for evaluating, optimizing, and maintaining LLM-powered applications, contains an incomplete URL scheme check that does not prevent...

Linux Distros Unpatched Vulnerability : CVE-2024-38167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Information Disclosure Vulnerability CVE-2024-38167 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2025-9805 SimStudioAI sim route.ts server-side request forgery

A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unknown processing of the file apps/sim/app/api/proxy/image/route.ts. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit...

Linux Distros Unpatched Vulnerability : CVE-2025-21172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2025-21172 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2024-38081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability CVE-2024-38081 Note that Nessus relies on the presence of the package as reported b...

Linux Distros Unpatched Vulnerability : CVE-2025-21176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2024-30105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-30105 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2024-43483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2024-38229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 Note that Nessus relies on the presence of the package as reported by the vendor...