CVE-2025-54260

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54260 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

CVE-2025-54243 Substance3D - Viewer | Out-of-bounds Write (CWE-787)

Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54260: Out-of-bounds Read

Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curren...

The vulnerability of the Wireshark traffic analyzer, related to buffer overflows in the stack, allows a hacker to trigger maintenance operations.

The vulnerability of the Wireshark traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow a hacker to cause a service failure by injecting packets or a specially created file...

The vulnerability of the package manager for Kubernetes Helm, related to improper code generation management, allows a attacker to execute arbitrary code.

The vulnerability of the package manager for Kubernetes Helm is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Exploit for Out-of-bounds Write in 7-Zip

This repository is an exploit module for CVE-2022-29072, a privilege escalation vulnerability in 7-Zip through version 21.07 on Windows. The vulnerability allows an attacker to execute commands with elevated privileges when a file with the .7z extension is dragged to the HelpContents area. The...

CVE-2025-57774

There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2017-5501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in libjasper/jpc/jpctsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted file. CVE-2017-5501 Note...

Linux Distros Unpatched Vulnerability : CVE-2022-38072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A...

Linux Distros Unpatched Vulnerability : CVE-2017-11732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability was found in the function dcputs called from decompileIMPLEMENTS in util/decompile.c in Ming 0.4.8, which allows...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the reading of data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the way they handle reading data beyond the buffer in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

CVE-2025-57776

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

CVE-2025-57775

There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The...

CVE-2025-57774

There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

CVE-2025-57775 Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab

There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The...

CVE-2025-57778

Digilent DASYLab DSB file parsing vulnerability (CVE-2025-57778): out-of-bounds write due to improper bounds checking enables arbitrary code execution when a user opens a malicious DSB file. Affected software is DASYLab; parsing of DSB files is the root cause. ZDI-25-891 confirms remote code exec...

CVE-2025-9189

CVE-2025-9189 concerns Digilent DASYLab: an out-of-bounds write while parsing DSB files, caused by improper bounds checking, which can lead to arbitrary code execution. Affected: all DASYLab versions (per initial docs). Exploitation requires user to open a crafted DSB file; the vulnerability is l...

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...