CVE-2025-9450 Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

CVE-2025-9450

CVE-2025-9450 describes a Use of Uninitialized Variable vulnerability in SOLIDWORKS eDrawings, specifically in the JT file reading procedure for SOLIDWORKS Desktop 2025. The flaw within memory handling during JT file parsing can allow an attacker to execute arbitrary code when opening a crafted J...

CVE-2025-9449 Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file...

CVE-2025-9447 Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file...

CVE-2025-9447

CVE-2025-9447 is an Out-of-Bounds Read in the PAR file parsing of SOLIDWORKS eDrawings (Desktop 2025). The cited advisories describe an arbitrary-code execution risk when opening a specially crafted PAR file, with a remote-exploitation angle noted by ZDI (requires user interaction, e.g., visiting...

CVE-2025-9447 Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file...

PT-2025-38120

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description A use of uninitialized variable issue exists in the JT file reading procedure within SOLIDWORKS eDrawings. This could allow an attacker to execute arbitrary code by...

OPENSUSE-SU-2025:15558-1 element-desktop-1.11.112-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.112-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-38118

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description An out-of-bounds read issue exists in the PAR file reading procedure of SOLIDWORKS eDrawings. Successful exploitation of this issue could allow an attacker to execute...

SUSE CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

PT-2025-38059

Name of the Vulnerable Software and Affected Versions: Element Web versions prior to 1.11.112 Element Desktop versions prior to 1.11.112 Description: Element Web and Element Desktop are susceptible to a room list manipulation issue due to insufficient validation of room predecessor links. A remot...

Microsoft Teams for Desktop < 25163.3611.3774.6315 Elevation of Privilege (July 2025)

The version of Microsoft Teams for Desktop on the remote Windows host is prior to 25163.3611.3774.6315 It is, therefore, affected by an elevation of privilege vulnerability: - Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate...

Element Desktop 输入验证错误漏洞

Element Desktop is an Element open source Matrix client for the Element Web-centered desktop platform. An input validation error vulnerability exists in Element Desktop versions prior to 1.11.112, which stems from insufficient validation of the room pre-links and could lead to a remote attacker...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system.Apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from insufficient checks when handling...

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708. The target product/service is Windows Remote Desktop, and the vulnerability class/vector is a remote code execution RCE vulnerability. The probable entry point is the poc.py script, which is typically invoked by running it directly. The expected impact is remote cod...

AutoRDPwn

This is a post-exploitation framework called AutoRDPwn, written in PowerShell. It is designed to automate the Shadow attack on Microsoft Windows computers, which allows a remote attacker to view and control the victim's desktop without their consent. The framework has a user-friendly interface an...