MAL-2025-15820 Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)

The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...

Malicious code in xerxes-augmentedreality-membrane-chalk (npm)

The package xerxes-augmentedreality-membrane-chalk was found to contain malicious code...

MAL-2025-38993 Malicious code in webdriver-manager-meissa-xenos-augmentedreality (npm)

The package webdriver-manager-meissa-xenos-augmentedreality was found to contain malicious code...

MAL-2025-19855 Malicious code in eslint-plugin-jasmine-augmentedreality-airbnb (npm)

The package eslint-plugin-jasmine-augmentedreality-airbnb was found to contain malicious code...

MAL-2025-31151 Malicious code in quasar-augmentedreality-australis-planckscale (npm)

The package quasar-augmentedreality-australis-planckscale was found to contain malicious code...

MAL-2025-15038 Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)

The package augmentedreality-yakutsk-biohacking-seismology was found to contain malicious code...

MAL-2025-39754 Malicious code in xerxes-augmentedreality-membrane-chalk (npm)

The package xerxes-augmentedreality-membrane-chalk was found to contain malicious code...

MAL-2025-20090 Malicious code in express-whitedwarf-augmentedreality-cluster (npm)

The package express-whitedwarf-augmentedreality-cluster was found to contain malicious code...

Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm)

The package luminescence-rollup-augmentedreality-geoarchaeology was found to contain malicious code...

Cobalt Ashlar-Vellum Buffer Overflow

The vulnerability of Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the reading of data beyond the buffer in memory during the processing of AR format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

On the Feasibility of Using MultiModal LLMs to Execute AR Social Engineering Attacks

Augmented Reality AR and Multimodal Large Language Models LLMs are rapidly evolving, providing unprecedented capabilities for human-computer interaction. However, their integration introduces a new attack surface for social engineering. In this paper, we systematically investigate the feasibility...

Adobe Aero Desktop Memory Management Code Execution

The vulnerability of the Adobe Aero Desktop software for viewing, developing, and publishing augmented reality content is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

CVE-2023-42105

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-42103

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-42102

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-35716

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-35715

Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Exploit

Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...

WordPress Augmented-Reality Remote Code Execution

Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...

Wordpress Augmented-Reality - Remote Code Execution Unauthenticated

Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...