2293 matches found
CVE-2020-27955
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
nray
nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...
idacode
IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...
CVE-2020-27955
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2020-27955-LFS
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2020-27955-LFS-main
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has patched vulnerabilities in various Developer Tools. A malicious actor can exploit these vulnerabilities to carry out attacks that may result in the categories of damage listed in the table below. The conditions required for successful exploitation vary depending on the vulnerability...
CVE-2026-70094
Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-121665
Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-121662
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code locally...
CVE-2026-121663
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-121660
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-121661
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-121664
Improper neutralization of input during web page generation 'cross-site scripting' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-120779
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-120782
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-119983
Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-119985
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...