127 matches found
Malicious code in jabbah-futurology-sedna-augmentedreality (npm)
The package jabbah-futurology-sedna-augmentedreality was found to contain malicious code...
MAL-2025-20090 Malicious code in express-whitedwarf-augmentedreality-cluster (npm)
The package express-whitedwarf-augmentedreality-cluster was found to contain malicious code...
MAL-2025-15038 Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)
The package augmentedreality-yakutsk-biohacking-seismology was found to contain malicious code...
MAL-2025-23528 Malicious code in jabbah-futurology-sedna-augmentedreality (npm)
The package jabbah-futurology-sedna-augmentedreality was found to contain malicious code...
Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)
The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...
MAL-2025-39754 Malicious code in xerxes-augmentedreality-membrane-chalk (npm)
The package xerxes-augmentedreality-membrane-chalk was found to contain malicious code...
MAL-2025-15820 Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)
The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...
MAL-2025-19516 Malicious code in eleventy-augmentedreality-npm-mira (npm)
The package eleventy-augmentedreality-npm-mira was found to contain malicious code...
The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the reading of data beyond the buffer in memory during the processing of AR format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...
On the Feasibility of Using MultiModal LLMs to Execute AR Social Engineering Attacks
Augmented Reality AR and Multimodal Large Language Models LLMs are rapidly evolving, providing unprecedented capabilities for human-computer interaction. However, their integration introduces a new attack surface for social engineering. In this paper, we systematically investigate the feasibility...
The vulnerability of the Adobe Aero Desktop software, which is used for viewing, developing, and publishing augmented reality content, lies in its memory management after it is freed. This allows a malicious actor to execute arbitrary code.
The vulnerability of the Adobe Aero Desktop software for viewing, developing, and publishing augmented reality content is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...
CVE-2023-42105
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2023-42103
Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2023-42102
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2023-35716
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
CVE-2023-35715
Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Exploit
Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...
WordPress Augmented-Reality Remote Code Execution
Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...
Wordpress Augmented-Reality - Remote Code Execution Unauthenticated
Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...