CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

Spartacus

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Spartacus for the latest version. Spartacus DLL/COM Hijacking Toolkit Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Beacon Object File BOF implementation for CVE-2024-35250. Build The project template is from bof-vs. Compile using the Release configuration in Visual Studio 2019/2022. Credits https://github.com/varwara/CVE-2024-35250...

CVE-2026-102869

A flaw was found in .NET and Visual Studio. A remote attacker could achieve privilege escalation by exploiting a type confusion vulnerability, which occurs when the software accesses a resource using an incompatible data type. Successful exploitation requires user interaction and may allow an...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Visual Studio Code Editor Path Traversal

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Editor Security Decisioning

The vulnerability of Microsoft Visual Studio Code’s editor is related to the use of unreliable input data when making security decisions. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

SQL Server Management Studio Code Execution

The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

Microsoft Visual Studio Code Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions...

Microsoft Visual Studio Code Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Source Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Path Traversal

The vulnerability of Microsoft Visual Studio Code’s source editor is related to incorrect resolution of path equivalence. Exploiting this vulnerability could allow an attacker to bypass security restrictions...

Security Update for Microsoft Visual Studio Code (October 2026)

The remote host has an application installed that is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. CVE-2026-102235 - Improper...

Security Updates for Microsoft Visual Studio Products 17.14.42 and 18.10.4 (October 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-105016 - Inconsistent interpretation of http requests...

KLA91352 Multiple vulnerability in Microsoft Developer Tools

Multiple vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to cause denial of service, spoof user interface. Original advisories CVE-2026-109468 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2026-109468 critical Solution...

CVE-2026-54703

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that...