CVE-2022-39806

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing .slddrw, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

CVE-2022-39806: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing .slddrw, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

PT-2022-25001 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Part .sldprt file in SAP 3D Visual Enterprise Author, it can trigger Remote Code Execution...

CVE-2022-39804: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part .sldprt, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

solidworks.com XSS vulnerability

Open Bug Bounty ID: OBB-382714 Description| Value ---|--- Affected Website:| solidworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SolidWorks-Workgroup-PDM-2014

Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability Date: 2-21-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.solidworks.com/sw/products/product-data-management/workgroup-pdm.htm Tested on: Windows 7 Vulnerability type: Arbitrary...

forum.solidworks.com Open Redirect vulnerability

Vulnerable URL: https://forum.solidworks.com/external-link.jspa?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 18.12.2016 Latest check for patch:| 18.12.2016 12:31 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

CVE-2014-100015

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

CVE-2014-100014

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

Directory traversal

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

Stack overflow

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100014

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100015

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

CVE-2014-100014

Affected product: SolidWorks Workgroup PDM 2014 SP2. Vulnerability: pdmwService.exe contains multiple stack-based buffer overflows exploitable by sending a long string (opcodes 2001/2002/2003) to port 3000, enabling remote code execution. The connected sources confirm the flaw but do not provide ...

CVE-2014-100015

CVE-2014-100015 affects SolidWorks Workgroup PDM 2014, specifically the pdmwService.exe component. The documented vulnerability is a directory traversal in a file upload mechanism, allowing remote attackers to write to arbitrary files by using a path with "..". Public references indicate exploit ...

PT-2015-3621

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload, potentially leading to unauthorized file modifications. Recommendations For...

PT-2015-3620

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 SP2 Description The issue is related to multiple stack-based buffer overflows in the pdmwService.exe component. This can be exploited by remote attackers who send a long string in specific opcodes to port...

CVE-2014-100014: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a 1 2001, 2 2002, or 3 2003 opcode to port 3000...

CVE-2014-100015: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 - Denial of Service

No description provided by source. ''' Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...