The vulnerability of the 3D model rendering software Luxion KeyShot lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Luxion KeyShot 3D modeling rendering software lies in the overflow of buffers in dynamic memory during the processing of DAE format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Luxion KeyShot 缓冲区错误漏洞

Luxion KeyShot is a software for designing photographs of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. Luxion KeyShot suffers from a buffer error vulnerability...

If the funding discount is set to 0 in Funding.sol, getAmountOut() will return always 0, no matter the amount of asset in.

Lines of code Vulnerability details Impact If a user doesn't set a minimum set to 0 of citadel expected in function deposit, can receive 0 tokens in exchange, no matter the amount of asset he's depositing. Proof of Concept The funding contract is used to trade citadel token with another asset. A...

Apple picture file leading to remote code execution-vulnerability warning-the black bar safety net

The vulnerability is from the Cisco Talos Tyler Bohan found. People in order to a specific industry specific design uses a number of file formats. Apple through the APIs interface to provide a specific way to access the OSX platform on a variety of image format of image data. Talos disclosure of...