CVE-2025-8001 Ashlar-Vellum Cobalt CO File Parsing Memory Corruption Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt CO File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7995 Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2025-7995

CVE-2025-7995 affects Ashlar-Vellum Cobalt. The vulnerability is a type confusion in CO file parsing caused by insufficient validation of user-supplied data, which can lead to remote code execution in the context of the current process. Exploitation requires user interaction (the target must visi...

Ashlar-Vellum Cobalt 缓冲区错误漏洞

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. An out-of-bounds write vulnerability exists in Ashlar-Vellum...

Ashlar-Vellum Cobalt 缓冲区错误漏洞

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...

UBUNTU-CVE-2023-53274

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt8183: Add back SSPM related clocks This reverts commit 860690a93ef23b567f781c1b631623e27190f101. On the MT8183, the SSPM related clocks were removed claiming a lack of usage. This however causes some issues when...

CVE-2025-39729 crypto: ccp - Fix dereferencing uninitialized error pointer

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 sevplatforminitlocked error: we previously assumed 'error' could be null...

ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.10.0-M8 <=1.10.0-M13), ch.epfl.bluebrain.nexus:delta-archive-plugin_2.13 (>=1.10.0-M8 <=1.10.0-M13) +644 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=3.0.0 <=3.12.0)

co.fs2:fs2-io2.13 MAVEN version =3.0.0, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =1.10.0-M8, =3.10-4b5f50b, =0.29.0, =1.0.0, =0.11.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-377-020cf9e and more Source cves: CVE-2025-58369 Source advisory:...

ch.epfl.bluebrain.nexus:cli_2.13 (>=1.5.0 <=1.6.1), ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.9.0-M1 <=1.9.0-M12-2) +513 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=2.0.0 <=2.5.12)

co.fs2:fs2-io2.13 MAVEN version =2.0.0, =1.5.0, =1.9.0-M1, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.5.0, =0.3.0, =0.22.0, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =2.1.0, =2.7.2 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669992...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0 <=0.7.0), com.47deg:embedded-cassandra-core_2.12 (=0.0.7) +592 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (>=0.9.2 <=2.5.12)

co.fs2:fs2-io2.12 MAVEN version =0.9.2, =0.3.0, =0.22.0, =0.0.1, =0.13.2, =0.2.6, =0.3.0, =0.2.0, =0.1.0, =0.6.1, =0.6.1, =0.18.1, =0.18.5 - com.avast:datadog4s-http4s2.12 =0.6.0 and more Source cves: CVE-2025-58369 Source advisory: OSV:GHSA-RRW2-PX9J-QFFJ...

MAL-2025-43837 Malicious code in co-in-mas-ter-free-spins-rthrtg (npm)

The package co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

Malicious code in co-in-mas-ter-free-spins-trhgrfr (npm)

The package co-in-mas-ter-free-spins-trhgrfr was found to contain malicious code...

Malicious code in co-in-mas-ter-free-spins-2023-dflme (npm)

The package co-in-mas-ter-free-spins-2023-dflme was found to contain malicious code...

Malicious code in coin-master-free-spins-2023-co-ins-zkdkz (npm)

The package coin-master-free-spins-2023-co-ins-zkdkz was found to contain malicious code...

Malicious code in co-in-mas-ter-free-spins-rthrtg (npm)

The package co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

MAL-2025-46647 Malicious code in working-april-co-in-mas-ter-free-spins-rthrtg (npm)

The package working-april-co-in-mas-ter-free-spins-rthrtg was found to contain malicious code...

MAL-2025-43846 Malicious code in coin-master-free-spins-2023-co-ins-zkdkz (npm)

The package coin-master-free-spins-2023-co-ins-zkdkz was found to contain malicious code...

MAL-2025-43836 Malicious code in co-in-mas-ter-free-spins-2023-dflme (npm)

The package co-in-mas-ter-free-spins-2023-dflme was found to contain malicious code...

interconnect: qcom: sc8180x: Mark CO0 BCM keepalive

...

DOS & CO SS1 路径遍历漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A path traversal vulnerability exists in DOS & CO SS1 version 16.0.0.10 and earlier, which stems from an improperly restricted pathname and could allow a remote, authenticated attacker to overwrite legitimate files...