Adaptive Substance 3D Painter Buffer Overflow Info Disclosure

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Adaptive Substance 3D Painter Buffer Overflow

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

Google Chrome Updater Privilege Escalation

The vulnerability of the Updater component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending a specially crafted malicious file...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

SoX read_samples() Component DoS

The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

Zyxel ATP FTP Arbitrary Command Execution

The vulnerability of the File Transfer Protocol FTP implementation in the microprogrammed network devices Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability...

Mattermost Denial of Service Vulnerability (CNVD-2025-12774)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial-of-service vulnerability that stems from a failure to time and size limit CA path files in the ElasticSearch configuration, which can be exploited by an attacker to add...

PT-2024-29290 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: SKYSEA Client View versions 6.010.06 through 19.210.04e Description: The issue allows for incorrect privilege assignment. If a user with login access to the PC where the Windows client is installed places a specially crafted DLL file in a...

nvdisasm CUDA Toolkit System Failure

The vulnerability of the nvdisasm utility in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially creat...

JT Open Toolkit PLM XML SDK Pointer Assignment DoS

The vulnerability of the JT Open Toolkit JTTK and PLM XML SDK development tools is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to trigger a service failure by loading a specially created malicious XML file...

PDF viewing and editing Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary...

CVE-2023-48643

Shrubbery tacplus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allows users to configure authorization checks as shell commands through the tacplus.cfg configuration file. These are executed when a client sends an authorization request with a...

SUSE CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

Adobe Animate Buffer Overflow

The vulnerability of the Adobe Animate software for creating multimedia and computer animations arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

CVE-2024-26540

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze...

Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File Read

Exploit Title: File Read Arbitrary Exploit for CVE-2023-26360 Google Dork: not Date: 12/28/2023 Exploit Author: Youssef Muhammad Vendor Homepage: https://helpx.adobe.com/coldfusion/kb/coldfusion-downloads.html Software Link: https://drive.google.com/drive/folders/17ryBnFhswxiE1sHrNByxMVPKfUnwqmp0...

PT-2024-4352 · Google · Google Updator +1

Name of the Vulnerable Software and Affected Versions: Google Updator versions prior to 1.3.36.351 Description: The issue is related to inadequate access control in the Google Updator program, allowing an attacker to bypass discretionary access control using a specially crafted file. This could...

PT-2024-2170 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 through Master Branch ab0ee111 Description: A use-after-free vulnerability exists in the sopen FAMOS read functionality. This issue can be triggered by a specially crafted .famos file, potentially leading to arbitrary...

PT-2024-8053

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted PRT file can force an Out-of-Bound Read when parsed in opennurbs.dll through Autodesk applications. This can allow a malicious actor to cause a crash, read...

CVE-2023-43823 Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution...