10406 matches found
CVE-2020-17100
Visual Studio Tampering Vulnerability...
CVE-2020-17104
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability...
CVE-2020-17104
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability...
Spoofing
Visual Studio Tampering Vulnerability...
CVE-2020-17104
CVE-2020-17104 concerns Visual Studio Code JSHint Extension. Root cause per PT-2020-4828: insufficient input validation in the Visual Studio Code editor, enabling a remote attacker to execute arbitrary code via a specially crafted file. The connected document does not specify affected versions or...
CVE-2020-17104 Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
...
CVE-2020-17100 Visual Studio Tampering Vulnerability
...
CVE-2020-17100
CVE-2020-17100 is a Visual Studio tampering vulnerability with a Local access vector and a Medium impact entry (I:H, other impacts N). The connected sources confirm this vulnerability affects Microsoft Developer Tools including Visual Studio and related tooling, enabling spoofing of the user inte...
Security Update for Microsoft Visual Studio Code JSHint Extension (August 2020)
A remote code execution vulnerability exists in Visual Studio Code JSHint Extension. An unauthenticated, local attacker can exploit this to bypass authentication and execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed multiple vulnerabilities in several developer tools. A malicious party could potentially exploit them to execute arbitrary code with both user privileges as well as elevated privileges or manipulate data. Vulnerabilities related to Visual Studio can only be be exploited by...
PT-2020-4695 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, allowing an attacker to bypass security restrictions and elevate their privileges...
Security Updates for Microsoft Visual Studio Products (November 2020)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a tampering vulnerability. The vulnerability exists when the Python Tools for Visual Studio creates the python27 folder. An attacker who successfully exploited this vulnerability could run processe...
PT-2020-4828 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue exists due to insufficient input validation in the Visual Studio Code editor. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a...
KLA11998 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server and Team Foundation Services can be...
Smart Scale to Autoscale Migration
Table of Contents Manual Migration --- Automated Migration Prerequisites Migrate Good to know Important: This article is applicable only if you have the Sites section in Smart Scale. Sites that use the Virtual Apps and Desktops service appear as “Cloudxdsite” by default. To view Sites, go to Citr...
studio-4b.ru Cross Site Scripting vulnerability OBB-1490994
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
git-lfs Remote Code Execution
/ Go PoC exploit for git-lfs - Remote Code Execution RCE vulnerability CVE-2020-27955 git-lfs-RCE-exploit-CVE-2020-27955.go Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Affected RCE exploit: Git / GitHub CLI / GitHub Desktop / Visual Studio / GitKraken / SmartGit /...