2078 matches found
CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability
...
Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...
Visual Studio Code for Linux Remote Code Execution Vulnerability
...
PT-2024-6977 · Microsoft · Visual Studio Code Extension For Arduino
Name of the Vulnerable Software and Affected Versions: Visual Studio Code extension for Arduino affected versions not specified Description: The issue is related to missing authentication for a critical function in the Visual Studio Code extension for Arduino, allowing an unauthenticated attacker...
PT-2024-6834 · Microsoft +1 · Visual Studio Code +1
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to the failure to neutralize special elements used in operating system commands. This could allow a remote attacker to execute arbitrary code. Recommendation...
CVE-2024-43488: Missing Authentication for Critical Function
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...
Microsoft Visual Studio Code 访问控制错误漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in the Microsoft Visual Studio Code extension for Arduino, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Visual Studio Code 命令注入漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A command injection vulnerability exists in Microsoft Visual Studio Code. An attacker exploiting this vulnerability could remotely execute code. No information about this vulnerability is available at this time, please...
CVE-2024-43601: Improper Neutralization of Special Elements used in a Command
Visual Studio Code for Linux Remote Code Execution Vulnerability...
CVE-2024-9145
Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...
CVE-2024-9145
The CVE-2024-9145 issue affects Wiz Code Visual Studio Code extension versions 1.0.0–1.5.3 and Wiz (legacy) Visual Studio Code extension versions 0.13.0–0.17.8. When a user opens a maliciously crafted Dockerfile located in a path marked as a “trusted folder” in Visual Studio Code and initiates a ...
CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension
Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...
CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension
Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...
Wiz Code和Wiz (legacy) 安全漏洞
Wiz Code and Wiz legacy are both a Visual Studio Code extension from Wiz, Inc. A security vulnerability exists in Wiz Code versions 1.0.0 through 1.5.3 and Wiz legacy versions 0.13.0 through 0.17.8, which stems from vulnerability to local command injection attacks...
CVE-2024-9145: Improper Neutralization of Special Elements used in a Command
Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz legacy Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder"...
Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks
The China-linked advanced persistent threat APT group known as Mustang Panda has been observed weaponizing Visual Studio Code software as part of espionage operations targeting government entities in Southeast Asia. "This threat actor used Visual Studio Code's embedded reverse shell feature to ga...
Markdown PDF 跨站脚本漏洞
Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developers. A cross-site scripting vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit this vulnerability to perform a cross-site scripting attack...
Markdown PDF 路径遍历漏洞
Markdown PDF is a Markdown converter for Visual Studio code by yzane individual developer. A security vulnerability exists in Markdown PDF version 1.5.0. An attacker can exploit the vulnerability to traverse pathnames...
MAL-2024-3834 Malicious code in vscode-ui5-language-assistant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9629544d283355bc3e5f8a20f5d3d42bf915bee3fc09af17209a8d17e97642d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
