CLEANSTART-2025-OK96384 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

avdroot

avdroot Android Studio エミュレータの ramdisk を Magisk でパッチして root 化 — 純粋な Go で。 English · 简体中文 avdroot は、コールドスタート状態の AVD から、コマンド1つで動作する root シェルまでを実現します。すべての処理はホスト側で行われます。ramdisk は展開され、Magisk の init が /init を置き換えるように書き換えられ、再圧縮されます。イメージのビルドにはシェルスクリプトも busybox も magiskboot も不要で、エミュレータ内でのコード実行も必要ありません。...

EUVD-2026-88756

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-0920

CVE-2026-0920 스캐너 취약한 LA-Studio Element 플러그인 버전을 사용하는 WordPress 사이트에서 CVE-2026-0920 노출을 탐지 및 검증하기 위한 Python 기반 스캐너입니다. 개요 이 도구는 취약한 플러그인 버전의 등록 흐름에서 부적절한 역할 처리와 관련된 취약점인 CVE-2026-0920 의 영향을 받을 가능성이 있는 WordPress 대상을 자동으로 식별하도록 설계되었습니다. 스크립트는 대상 목록을 처리하고, 검증 확인을 시도하며, 성공적인 결과를 나중에 검토할 수 있도록 출력 파일에...

CVE-2026-98055

A flaw was found in the Linux kernel's Intel Audio Voice Studio AVS driver. This flaw can lead to a Denial of Service DoS due to improper resource cleanup during device initialization. When probing an audio device, the driver fails to check return codes from capability queries and does not releas...

CVE-2024-23995

Beekeeper-Studio PoC CVE-2024-23995 취약점에 대한 개념 증명PoC입니다. 1. 취약성 개요: 취약점 대상: RCE via XSS 취약한 버전: = Beekeeper-Studio-4.1.13 공격 유형: 원격 코드 실행 공격 경로: 취약점을 악용하려면 테이블의 열 이름에 악성 스크립트를 삽입해야 합니다. 해당 열tabulator-header-contents 위에 마우스를 올리면 미리보기tabulator-popup-container가 실행되어 악용이 이루어집니다. 예약된 CVE 번호:...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 poc win10 21h2 19044.1620 win11 21h2 22000.593 컴파일 기본 정보 Windows SDK 버전 ：10.0 최신 설치 버전 플랫폼 도구 집합: Visual Studio 2022 v143 C++ 언어 표준 : 기본값ISO C++14 표준...

CVE-2025-52385

CVE-2025-52385 소프트웨어 : Studio 3T v.2025.1.0 취약점 보고서 : Studio 3T 원격 명령 실행 개요 Studio 3T 버전 2025.1.0 및 이전 버전의 심각한 취약점으로 인해 원격 공격자가 IntelliShell 구성 요소의 childprocess 모듈을 악용하는 조작된 페이로드를 통해 임의 코드를 실행할 수 있습니다. 세부 정보 취약점 유형: 원격 명령 실행 영향받는 제품: Studio 3T, 버전 console.logstdout; 또는 아래 명령을 확인 벡터로 사용하십시오:curl...

CVE-2022-40635

CVE-2022-40635: CrafterCMS의 Groovy 샌드박스 우회 Crafter CMS의 Crafter Studio에 존재하는 동적으로 관리되는 코드 리소스 제어 불량Improper Control of Dynamically-Managed Code Resources 취약점으로 인해 인증된 개발자가 Groovy 샌드박스 우회를 통해 OS 명령을 실행할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 요구 사항: 이 취약점에는 다음이 필요합니다: 유효한 사용자...

The vulnerability of the .NET software platform and the Visual Studio Code editor, related to deficiencies in HTTP request processing, allows attackers to disclose sensitive information.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the .NET software platform and the Visual Studio Code editor lies in buffer overflows in dynamic memory, which allows attackers to escalate their privileges.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the .NET software platform and the Visual Studio Code editor lies in buffer overflows in dynamic memory, which allows attackers to escalate their privileges.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the .NET software platform and the Visual Studio Code editor, related to memory management after object release, allows attackers to exploit this to disclose sensitive information.

The vulnerability of the .NET software platform and the Visual Studio Code code editor is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

The vulnerability of the .NET software platform and the Visual Studio Code code editor, related to improper deletion of critical data at the boundary, allows a hacker to trigger a service failure.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the .NET software platform and the Visual Studio Code code editor, related to improper deletion of critical data at the boundary, allows attackers to disclose sensitive information.

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

[SECURITY] Fedora 45 Update: obs-studio-plugin-droidcam-2.4.3-7.fc45

Use your phone as a camera directly in OBS. You can add as many devices as you want, either using WiFi or USB...

[SECURITY] Fedora 45 Update: obs-studio-plugin-pwvideo-0.2.4-3.fc45

Generic PipeWire video source for OBS. Useful for routing arbitrary video streams into your scenes...

[SECURITY] Fedora 45 Update: obs-studio-32.2.2-3.fc45

Open Broadcaster Software is free and open source software for video recording and live streaming...

[SECURITY] Fedora 45 Update: obs-studio-plugin-vaapi-0.4.2-7.fc45

GStreamer based VAAPI encoder implementation. Taken out of the GStreamer OBS plugin as a standalone plugin. Simply because the FFMPEG VAAPI implementation shows performance bottlenecks on some AMD hardware. Supports H.264, H.265 and AV1...

CVE-2026-93559

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attac...