1487 matches found
CVE-2023-29338
Visual Studio Code Spoofing Vulnerability...
Spoofing
Visual Studio Code Spoofing Vulnerability...
CVE-2023-29338 Visual Studio Code Spoofing Vulnerability
...
CVE-2023-29338
CVE-2023-29338 is a Visual Studio Code information-disclosure spoofing vulnerability on Windows, enabling local attackers with user interaction to access sensitive data via spoofing vectors. Root cause is a spoofing flaw in VS Code (affected versions include 1.78.0 and earlier per FreeBSD VuXML e...
Visual Studio Code Spoofing Vulnerability
...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in two Developer Tools. In order to exploit the vulnerabilities, the malicious party must have local access to the development environment. SysInternals: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact |...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. An attacker exploits the vulnerability to perform spoofing attacks...
KLA49157 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in SysInternals Sysmon for Windows can be...
PT-2023-2714 · Microsoft +1 · Visual Studio Code +1
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient protection of service data in Visual Studio Code. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations...
Security Update for Microsoft Visual Studio Code (May 2023)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.78.1. It is, therefore, affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested f...
Visual Studio Code Server Files Detected
Visual Studio Code is a popular source-code editor provided by Microsoft, with extensions offering a variety of extra functionality including remote workspace access via ssh. Use of this remote workflow creates a hidden directory named .vscode-server on the remote server which may be exposed with...
Microsoft Visual Studio Code < 1.77.2 RCE
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.77.2 It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...
CVE-2023-24893
Visual Studio Code Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2023-24893
CVE-2023-24893 affects Visual Studio Code; versions prior to 1.77.2 are vulnerable to remote code execution. An attacker could bypass authentication and execute arbitrary commands. Remediation: update VS Code to 1.77.2 or later per Nessus plugin details. Other sources corroborate RCE vectors for ...
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...