Security Update for Microsoft Visual Studio Code (September 2025)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.104.0. It is, therefore, affected by multiple vulnerabilities: - Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network. CVE-2025-55319 Note tha...

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures. "In this activity, the group masqueraded as the current Chair of the Select Committee on...

Unspecified Vulnerability in Microsoft Visual Studio Code (CNVD-2025-22193)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code that originates from insufficiently filtered or validated user-supplied data and can be exploited by an attacker to remotely execute arbitrary code...

CVE-2025-55319

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...

Metasploit Wrap-Up 09/12/25

New LightHouse Studio RCE module This week we've added a new module that exploits an unauthenticated template injection vulnerability CVE-2025-34300 in Sawtooth Software’s Lighthouse Studio, allowing arbitrary Perl execution via survey templates in versions prior to 9.16.14. This module has the...

CVE-2025-55319

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2025-55319

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2025-55319

CVE-2025-55319 corresponds to a remote code execution issue involving Agentic AI in Microsoft Visual Studio Code. The vulnerability allows an unauthenticated, network-based attacker to execute arbitrary code on the affected host via the Agentic AI functionality integrated with VS Code. The CVE is...

CVE-2025-55319 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2025-55319: Improper Neutralization of Special Elements used in a Command

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network...

PT-2025-37270

Name of the Vulnerable Software and Affected Versions: Agentic AI and Visual Studio Code affected versions not specified Description: An AI command injection flaw exists in Agentic AI and Visual Studio Code, allowing an unauthorized attacker to execute code over a network via crafted prompts...

Wind River Studio Developer security vulnerabilities

Wind River Studio Developer is a tool with the ability to build, test, and debug embedded system applications from Wind River Studio Developer, USA. A security vulnerability exists in Wind River Studio Developer that originates from a random contention condition that can occur during an...

Microsoft Visual Studio Code security vulnerabilities

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code that originates from insufficiently filtered or validated user-supplied data and can be exploited by an attacker to remotely execute arbitrary code...

KLA87522 ACE vulnerability in Microsoft Developer Tools

A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-55319 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-553...

Linux Distros Unpatched Vulnerability : CVE-2021-33900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism DIGEST-MD5, GSSAPI...

Arbitrary Code Injection

Overview simstudio is a Sim Studio CLI - Run Sim Studio with a single command Affected versions of this package are vulnerable to Arbitrary Code Injection via the route.ts function. An attacker can execute arbitrary code by supplying crafted input to the code argument. Remediation A fix was pushe...

django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2025-57833 via django (3.1.13)

django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

CVE-2025-8360

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets in all versions up to, and including, 1.5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...