2163 matches found
Wiz Code and Wiz (legacy) security vulnerabilities
Wiz Code and Wiz legacy are both a Visual Studio Code extension from Wiz, Inc. A security vulnerability exists in Wiz Code versions 1.0.0 through 1.5.3 and Wiz legacy versions 0.13.0 through 0.17.8, which stems from vulnerability to local command injection attacks...
Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks
The China-linked advanced persistent threat APT group known as Mustang Panda has been observed weaponizing Visual Studio Code software as part of espionage operations targeting government entities in Southeast Asia. "This threat actor used Visual Studio Code's embedded reverse shell feature to ga...
Markdown PDF Cross-Site Scripting Vulnerabilities
Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developers. A cross-site scripting vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit this vulnerability to perform a cross-site scripting attack...
Markdown PDF path traversal vulnerability
Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developer. A security vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit the vulnerability to traverse pathnames...
MAL-2024-3834 Malicious code in vscode-ui5-language-assistant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9629544d283355bc3e5f8a20f5d3d42bf915bee3fc09af17209a8d17e97642d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vscode-dev-containers (npm)
--- -= Per source details. Do not edit below this line.=-...
GitKraken GitLens Visual Studio Code Execution
The vulnerability of the plugin for control and visualization of Git history, GitKraken, GitLens, and the source code editor Visual Studio Code is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially...
ROS-20240503-05
Microsoft Visual Studio Codef source code editor vulnerability is related to flaws in access control. access. Exploitation of the vulnerability could allow an attacker acting remotely to elevate his or her privileges...
Visual Studio Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Visual Studio vsix Extension Exec', 'Description' = %q Creates a vsix file which can be installed in Visual Studio Code as an extension. At...
CVE-2024-1569
parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...
CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui
parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...
CVE-2024-1569
parisneo/lollms-webui is vulnerable to denial of service through uncontrolled resource consumption. An attacker can trigger repeated unauthenticated POST requests at /open_code_in_vs_code and similar endpoints to repeatedly open VS Code or the default folder opener, exhausting system resources an...
CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui
parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...
CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui
parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...
LoLLMs Resource Management Error Vulnerability
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A resource management error vulnerability exists in LoLLMs that originates from allowing an attacker to open Visual Studio Code or the default folder opener multiple times by sending repeated...
Microsoft Visual Studio Code Editor Privilege Escalation
The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
