CVE-2024-51561

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process...

CVE-2024-51561

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process...

CVE-2024-51561

CVE-2024-51561 affects Aero (frontend product) due to improper OTP validation in certain API endpoints. An authenticated remote attacker can bypass OTP verification by intercepting/manipulating responses during the second-factor process, potentially accessing other user accounts. Exploitation det...

CVE-2024-51561 Authentication bypass Vulnerability in Aero

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process...

CVE-2024-51561 Authentication bypass Vulnerability in Aero

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process...

PT-2024-34705 · Aero · Aero

Name of the Vulnerable Software and Affected Versions: Aero affected versions not specified Description: This issue exists due to improper implementation of the OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this by intercepting and manipulating...

Aero CMS 0.0.1 Cross Site Request Forgery

============================================================================================================================================= | Title : Aero CMS v0.0.1 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vendor...

The vulnerability of the Adobe Aero Desktop software, which is used for viewing, developing, and publishing augmented reality content, lies in its memory management after it is freed. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Aero Desktop software for viewing, developing, and publishing augmented reality content is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

CVE-2024-30275

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30275

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30275 Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30275

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use-After-Free vulnerability in which parsing SVG/files can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Mitigation: apply the Adobe u...

CVE-2024-30275 Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Aero Memory Misreference Vulnerability

Adobe Aero is an Augmented Reality AR authoring tool from the American company Audobee Adobe that enables users to utilize balanced reality and virtual reality technologies to create a combination of real and imaginary experiences in the real world. Adobe Aero suffers from a memory misreference...

Adobe Aero 资源管理错误漏洞

Adobe Aero is an Augmented Reality AR authoring tool from the American company Audobee Adobe that enables users to utilize balanced reality and virtual reality technologies to create a combination of real and imaginary experiences in the real world. Adobe Aero suffers from a memory misreference...

APSB24-33 : Security update available for Adobe Aero

No description provided...

aero-shade.com Cross Site Scripting vulnerability OBB-3901353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aero-club.eu Improper Access Control vulnerability OBB-3820979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aero-news.net Cross Site Scripting vulnerability OBB-3807598

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aero-ce.com Cross Site Scripting vulnerability OBB-3752180

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...