Microsoft Visual Studio Code Arduino扩展 权限管理不当漏洞 可导致远程代码执行

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
• Microsoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞（CVE-2025-53770）
• Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞（CVE-2026-50522）
• Microsoft SharePoint Server JWT 权限绕过漏洞（CVE-2026-55040）
• 北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞
• 时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞
• PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site Scripting
• PoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSS
• Label Studio存在XSS漏洞(CVE-2025-25296)
• PoCsupabase-studio-exposure: Supabase Studio - Exposure
• PoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
• PoCCVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
• PoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site Scripting