CVE-2025-60035

The vulnerability CVE-2025-60035 affects the OPC.Testclient utility in Rexroth IndraWorks prior to version 15V24. It allows an attacker to achieve Remote Code Execution by parsing a specially crafted serialized file that is opened by a user; deserialization of malicious data leads to a complete c...

CVE-2025-33253

CVE-2025-33253 affects NVIDIA NeMo Framework via Nemo-toolkit deserialization, enabling remote code execution when a user loads a malicious file. Connected sources specify nemo-toolkit as the vulnerable component, with advisories indicating that versions >=0.10.1 and

CVE-2025-33253

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2025-33241

CVE-2025-33241 affects NVIDIA NeMo Framework. A remote-code-execution vulnerability can be triggered by loading a maliciously crafted file, with potential impacts including code execution, privilege escalation, information disclosure, and data tampering. NVIDIA’s security bulletin (Feb 2026) prov...

RLSA-2026:2707 Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: heap-base...

PT-2026-20414

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which...

PT-2026-20412

Name of the Vulnerable Software and Affected Versions Rexroth IndraWorks UA.Testclient versions prior to 15V24 Description A flaw exists in the UA.Testclient utility, included within Rexroth IndraWorks, allowing an attacker to execute arbitrary code on a user’s system. This is achieved by parsing...

CVE-2025-33241: Deserialization of Untrusted Data

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

PT-2026-20413

Name of the Vulnerable Software and Affected Versions Rexroth IndraWorks affected versions not specified Description A flaw exists that allows an attacker to execute arbitrary code on a user’s system by parsing a manipulated file containing malicious serialized data. Exploitation requires user...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the acceptable range of memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the allowable range of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its integer overflow vulnerabilities, which allow attackers to trigger a service failure.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the ability to execute code outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the acceptable range of memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the allowable range of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the ability to execute code outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Audition’s audio editor, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, provided that the user opens a specially crafted file...

The vulnerability of Adobe Audition’s audio editor, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, provided that the user opens a specially crafted file...

The vulnerability of Adobe Audition’s audio editor lies in the ability to record data beyond the buffer limit in memory, which allows a hacker to cause a service failure.

The vulnerability of Adobe Audition is related to the recording of data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a service failure if the user opens a specially crafted file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to pointer assignment errors, allows a hacker to cause a service failure.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure, provided that the user opens a specially crafted file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading beyond the permitted range in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the permitted range in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, provided that the user opens a specially...