CVE-2025-9459 SLDPRT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9459

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9459 SLDPRT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9459

CVE-2025-9459 affects Autodesk AutoCAD and related components used to parse SLDPRT files. The vulnerability results from an out-of-bounds read when parsing SLDPRT content, which can cause a crash, expose sensitive data, or allow arbitrary code execution in the context of the affected process. Sev...

CVE-2025-9456

Autodesk CVE-2025-9456 is a memory corruption vulnerability in the parsing of SLDPRT files when processed by Autodesk products, leading to arbitrary code execution within the current process. The issue is linked to Autodesk Shared Components and is described across multiple sources as affecting S...

PT-2025-51346

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description A specially designed SLDPRT file can trigger an Out-of-Bounds Read issue when processed by specific Autodesk products. Successful exploitation could lead to a program crash,...

PT-2025-51343

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description A specially designed SLDPRT file can cause a memory corruption issue when processed by certain Autodesk products. A malicious actor could potentially use this to run arbitrary code...

PT-2025-51339

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description A specially designed SLDPRT file can cause a memory corruption issue when processed by specific Autodesk products. Successful exploitation could allow a malicious actor to execute...

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

PT-2025-51077

Name of the Vulnerable Software and Affected Versions Extensive VC Addons for WPBakery page builder plugin for WordPress versions prior to 1.9.2 Description The software is susceptible to a Local File Inclusion issue due to insufficient path normalization and validation of the shortcode name...

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

EUVD-2025-203063

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

Siemens Simcenter Femap 安全漏洞

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. A security vulnerability exists in versions prior to Siemens Simcenter Femap...

Updated apache-commons-fileupload packages fix security vulnerability

Apache Commons FileUpload: FileUpload DoS via part headers. CVE-2025-48976...

MGASA-2025-0296 Updated apache-commons-fileupload packages fix security vulnerability

Apache Commons FileUpload: FileUpload DoS via part headers. CVE-2025-48976...

EUVD-2025-175309

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990457 advisory. In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth...

CVE-2025-10150 Webserver crash caused by scanning on TCP port 80

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

EUVD-2025-36058

A vulnerability was identified in ajayrandhawa User-Management-PHP-MYSQL up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This affects an unknown part of the file /admin/edit-user.php of the component User Management Interface. Such manipulation of the argument image leads to unrestricted upload. ...

Part Four of The Kryptos Sculpture

Two people found the solution. They used the power of research, not cryptanalysis, finding clues amongst the Sanborn papers at the Smithsonian's Archives of American Art. This comes as an awkward time, as Sanborn is auctioning off the solution. There were legal threats--I don't understand their...