Microsoft Paint 3D Code Injection Vulnerability

Microsoft Paint 3D is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on the system...

PT-2022-1837

Name of the Vulnerable Software and Affected Versions Paint 3D affected versions not specified Description The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted file, potentially allowing the execution of arbitrary code. Recommendations At the...

KLA12476 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Intune Portal for iOS can be...

Microsoft Paint 3D Code Execution (March 2022)

The Windows 'Paint 3D' app installed on the remote host is affected by a code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted file. %NASLMINLEVEL...

[SECURITY] [DLA 2934-1] freecad security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2934-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.8.5)

pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2022-0845 Source...

Bentley MicroStation CONNECT Out-of-Bounds Write Vulnerability (CNVD-2022-30753)

Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Bentley MicroStation CONNECT 10.16.0.80 is vulnerable to an out-of-bounds write vulnerability when parsing JT files, which could be exploited by remote attackers to The vulnerability...

Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30754)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. A remote code execution vulnerability exists in Bentley MicroStation CONNECT 10.16.0.80 when parsing JT files, which stems from The program does not verify the existence of an obje...

WordPress 3D viewer – Embed 3D Models plugin <= 1.2.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress 3D viewer – Embed 3D Models plugin versions = 1.2.6. Solution Update the WordPress 3D viewer – Embed 3D Models plugin to the latest available version at least 1.2.7...

3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting

The plugin does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook. As a subscriber:...

WordPress 3D viewer – Embed 3D Models plugin <= 1.2.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress 3D viewer – Embed 3D Models plugin versions = 1.2.6. Solution Update the WordPress 3D viewer – Embed 3D Models plugin to the latest available version at least 1.2.7...

3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting

The plugin does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook. PoC As a subscriber:...

WordPress 3D FlipBook plugin <= 1.12.0 - Subscriber+ Stored Cross-Site Scripting (XSS) vulnerability

Subscriber+ Stored Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress 3D FlipBook plugin versions = 1.12.0. Solution Update the WordPress 3D FlipBook plugin to the latest available version at least 1.12.1...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15816)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16159)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16157)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to disclose sensitive information about an affected installation of...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16146)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to disclose sensitive information about an affected installation of...

Bentley Systems MicroStation Buffer Overflow Vulnerability

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to execute arbitrary code in the context of the current process, along...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-15817)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to disclose sensitive information about an affected installation of...

Bentley Systems MicroStation Buffer Overflow Vulnerability (CNVD-2022-16149)

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer overflow vulnerability exists in Bentley Systems MicroStation that can be exploited by an attacker to execute code in the context of the current process...