Microsoft Visual Studio .NET Code Execution

The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Important: dotnet8.0

Issue Overview: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual Studio Denial of...

Important: dotnet6.0

Issue Overview: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43485 Affected Packages: dotnet6.0 Issue...

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-776)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-776 advisory. .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2024-777)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-777 advisory. .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual...

Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage

A suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as part of a campaign codenamed Operation Digital Eye. The intrusions took place from late June to mid-July 2024, cybersecurity companies...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2024-35250-BOF The Beacon Object File BOF implementati...

Python extension for Visual Studio Code Execution

The vulnerability of the Python extension for the Visual Studio Code code editor involves breaching trust boundaries. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

BIT-DOTNET-SDK-2024-43498 .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability...

BIT-DOTNET-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-DOTNET-SDK-2024-43499 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...

Security Update for Microsoft Visual Studio Code Python Extension (November 2024)

The Microsoft Visual Studio Code Python Extension is prior to version 2024.18.2. It is, therefore, affected by an undisclosed remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Visual Studio Code Remote SSH Privilege Escalation

The vulnerability of the Visual Studio Code Remote – SSH extension of the code editor Visual Studio Code is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

Security Update for Microsoft Visual Studio Code Remote SSH Extension (November 2024)

The Microsoft Visual Studio Code Remote SSH Extension is prior to version 0.115.1. It is, therefore, affected by an undisclosed elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Microsoft Visual Studio Code Python Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code Python Extension, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-48759)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker can exploit...

Security Updates for Microsoft Visual Studio Products (November 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to a .NET vulnerable webapp or loading a specially...