Adobe Substance 3D Modeler Out-of-Bounds Write Vulnerability (CNVD-2025-15170)

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Stager Memory Misreference Vulnerability (CNVD-2025-15172)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

We Made Luigi Mangione’s 3D-Printed Gun—and Fired It

In the wake of Luigi Mangione’s alleged killing of a health care CEO with a partially 3D-printed pistol, we built and tested the exact same model of weapon ourselves. And it was entirely legal...

Adobe Substance 3D Stager < 3.1.2 Multiple Vulnerabilities (APSB25-46)

The version of Adobe Substance 3D Stager installed on the remote host is prior to 3.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-46 advisory. - Substance3D Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result...

Adobe Substance 3D Painter 11.0.1 (APSB25-38)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 11.0.1. It is, therefore, affected by a vulnerability as referenced in the APSB25-38 advisory. - Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could resul...

Adobe Substance 3D Modeler 1.22.0 Multiple Vulnerabilities (APSB25-51)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-51 advisory. - Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element...

Adobe Substance3D 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance3D 资源管理错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

APSB25-38 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses a critical vulnerability in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution...

APSB25-51 : Security update available for Adobe Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical and important vulnerabilities in Adobe Substance 3D Modeler. Successful exploitation could lead to arbitrary code execution and memory leak...

APSB25-46 : Security update available for Adobe Substance 3D Stager

Adobe has released an update for Adobe Substance 3D Stager. This update addresses critical and important vulnerabilities in Adobe Substance 3D Stager. Successful exploitation could lead to arbitrary code execution and memory leak...

mesa bug fix and enhancement update

An update is available for mesa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mesa provides a 3D graphics API that is compatible with Open Graphics Library...

CVE-2025-32788 OctoPrint Authenticated Reverse Proxy Page Authentication Bypass

OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a vulnerability that allows an attacker to bypass the login redirect and directly access the rendered HTML of certain frontend pages. The primary risk lies in potential...

CVE-2025-32788

CVE-2025-32788 – OctoPrint Up to version 1.10.3, OctoPrint could bypass the login redirect and directly access rendered HTML of certain frontend pages by abusing authentication checks. The issue centers on the frontend authentication flow, notably functions like require_login, require_login_with,...

PT-2025-17558 · Octoprint · Octoprint

Name of the Vulnerable Software and Affected Versions: OctoPrint versions up to and including 1.10.3 Description: OctoPrint provides a web interface for controlling consumer 3D printers. The issue allows an attacker to bypass the login redirect and directly access the rendered HTML of certain...

CVE-2025-32248

Cross-Site Request Forgery CSRF vulnerability in SwiftXR SwiftXR 3D/AR/VR Viewer swiftxr-3darvr-viewer allows Cross Site Request Forgery.This issue affects SwiftXR 3D/AR/VR Viewer: from n/a through = 1.0.7...

CVE-2025-32248

Cross-Site Request Forgery CSRF vulnerability in SwiftXR SwiftXR 3D/AR/VR Viewer swiftxr-3darvr-viewer allows Cross Site Request Forgery.This issue affects SwiftXR 3D/AR/VR Viewer: from n/a through = 1.0.7...

CVE-2025-32248: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SwiftXR SwiftXR 3D/AR/VR Viewer swiftxr-3darvr-viewer allows Cross Site Request Forgery.This issue affects SwiftXR 3D/AR/VR Viewer: from n/a through = 1.0.7...

PT-2025-15004

Name of the Vulnerable Software and Affected Versions SwiftXR 3D/AR/VR Viewer versions 1.0.0 through 1.0.7 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations For versions 1.0.0 through 1.0.7, consider implementing...

CVE-2025-0826

A stored Cross-site Scripting XSS vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...