45 matches found
Malicious code in internal-vscode-extension (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in llvm-vs-code-extensions.vscode-clangd (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b822fb613c3a0252eacdb48a5dea6a7b94786cc7b461e72423800257d6d650c Any computer that has this package installed or running should be considered...
CVE-2023-46248
Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...
Remote code execution
Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...
CVE-2023-46248 Overwrite of builtin Cody commands facilitates RCE
Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...
CVE-2023-46248 Overwrite of builtin Cody commands facilitates RCE
Cody is an artificial intelligence AI coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file .vscode/cody.json and...
CVE-2023-46248
CVE-2023-46248 affects the Cody AI VSCode extension (versions 0.10.0–0.14.0). An attacker controlling a malicious repository can modify the Cody configuration file ".vscode/cody.json" and overwrite Cody commands. If a user with the extension installed opens that repository and executes a Cody com...
MAL-2022-4586 Malicious code in microsoft-data-mapper-vscode-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678ab57585e9c697e1a9baf24e9622476369f342f5ac0dbd5ec273045472a213 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-23074 · Unknown · Gitops Tools Extension For Vscode
Name of the Vulnerable Software and Affected Versions: GitOps Tools Extension for VSCode affected versions not specified Description: A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users...
Microsoft VSCode Extension 操作系统命令注入漏洞
Microsoft VSCode Extension is an extension for VSCode from Microsoft Corporation USA. An operating system command injection vulnerability exists in the Microsoft VSCode Extension vscode-gitops-tools versions 0.7.0 through 0.20.2, which stems from vscode-gitops-tools' dependency on kubeconfigs to...
Malicious code in teamcity-vscode-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
CVE-2021-28471
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
Code injection
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
CVE-2021-22195
CVE-2021-22195 affects the GitLab VSCode extension (gitlab-vscode-extension) v3.15.0 and earlier. It enables client-side code execution, allowing an attacker to run code on the user’s system. The connected documents corroborate vulnerable component and impact but do not provide exploit steps, spe...
CVE-2021-22195
Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...
GitLab gitlab-vscode-extension 代码问题漏洞
Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...
