CVE-2025-5043 3DM File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5038 X_T File Parsing Memory Corruption Vulnerability

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-5038 X_T File Parsing Memory Corruption Vulnerability

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

RLSA-2025:3262 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 For more details about the security issues, including the impact, a...

CVE-2025-53649

CVE-2025-53649 – SwitchBot App (Android/iOS) involves an insecure logging flaw where sensitive user information can be written to log files. Affected versions are SwitchBot App V6.24 through V9.12. The root cause is insertion of sensitive information into log files, enabling exposure to anyone wi...

Autodesk AutoCAD PRT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

PT-2025-31421 · Dell · Dell Xtremio

Name of the Vulnerable Software and Affected Versions: Dell XtremIO version 6.4.0-22 Description: Dell XtremIO version 6.4.0-22 contains a vulnerability that allows an attacker with local access to potentially expose sensitive information. This information exposure could allow the attacker to...

PT-2025-31423 · Dell · Dell Xtremio X2 +1

Name of the Vulnerable Software and Affected Versions: TechAdvisor versions 2.6 through 3.37-30 Description: TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could...

CVE-2025-8269

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletes1.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

PT-2025-31041 · Unknown · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A vulnerability exists in an unknown functionality of the file /admin/delete s5.php. The manipulation of the argument ID leads to SQL injection. The attack may be launched remotely...

CVE-2025-51863

Self Cross Site Scripting XSS vulnerability in ChatGPT Unli ChatGPTUnli.com thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG file to the chat interface...

CVE-2025-5042 RFA File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042

CVE-2025-5042 concerns Autodesk Revit. A maliciously crafted RFA file parsed by Revit can trigger an Out-of-Bounds Read, potentially crashing the process, reading sensitive data, or executing arbitrary code in the current process context. This is evidenced across multiple connected sources descri...

PT-2025-30421 · Unknown · Chatgpt Unli

Name of the Vulnerable Software and Affected Versions: ChatGPT Unli versions through 2025-05-26 Description: A self cross-site scripting XSS issue exists in ChatGPT Unli that allows attackers to execute arbitrary code. The issue is triggered by a crafted SVG file submitted to the chat interface...

CVE-2025-51863

The CVE-2025-51863 issue is a Self-XSS vulnerability in ChatGPT Unli’s chat interface, exploitable via a crafted SVG file uploaded/submitted to the chat. The root cause is unsanitized SVG handling that allows arbitrary code execution, leading to cookie theft and potential remote account hijacking...

CVE-2025-7268

IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7272

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7251

IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7299 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7325

CVE-2025-7325 concerns the IrfanView CADImage Plugin, where the DXF file parsing contains a memory corruption flaw. The vulnerability can allow remote code execution in the context of the affected process, with user interaction required (visiting a crafted page or opening a malicious file). The i...