5193 matches found
CVE-2025-47959 Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-47959 Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-47959
CVE-2025-47959 is a Visual Studio remote code execution bug caused by improper neutralization of command elements (command injection). Affects Visual Studio components exposed over network; attacker with network access and low privileges, but user interaction is required per the CVSS, enabling co...
CVE-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-30399
CVE-2025-30399 is a Remote Code Execution vulnerability described as an untrusted search path in .NET and Visual Studio that allows an attacker to execute code over the network by placing files in specific locations. Connected advisories confirm affected runtimes and provide fixes: .NET 8.x runti...
CVE-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by network spoofing vulnerability where External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
Security Updates for Microsoft Visual Studio 2022 Products (June 2025)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. CVE-2025-30399 - Improper neutralization of...
Visual Studio Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code over a network...
.NET and Visual Studio Remote Code Execution Vulnerability
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio 命令注入漏洞
Microsoft Visual Studio is a family of development tool suites from Microsoft Corporation USA and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. A command injection vulnerability exists in Microsoft Visual Studio. An attacker could...
Microsoft Visual Studio initializeCommand Insufficient UI Warning Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
UBUNTU-CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio和Microsoft .NET 代码问题漏洞
Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
KLA84761 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET and Visual Studio can be exploited remotely...
PT-2025-24907 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to the improper neutralization of special elements used in a command, also known as 'command injection', in Microsoft Visual Studio. This allows an...
JavaSith: a Client-Side Framework for Analyzing Potentially Malicious Extensions in Browsers, VS Code, and NPM Packages
Modern software supply chains face an increasing threat from malicious code hidden in trusted components such as browser extensions, IDE extensions, and open-source packages. This paper introduces JavaSith, a novel client-side framework for analyzing potentially malicious extensions in web...
CVE-2024-1569
parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...