Malware in scenes-e2e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in scenes-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in scenes-testing

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in scenes-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fcbc7d7a26ce0416a317318a71735a6e1c6c1af16ead4f04b8ce6a5ee6d4b08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5953 Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in scenes-ml-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-30514

Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...

CVE-2025-24315

Unauthenticated attackers can add devices of other users to their scenes or arbitrary scenes of other arbitrary users...

CVE-2025-31360

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

CVE-2025-31360

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

CVE-2025-30514

Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...

PT-2025-16502

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users. This issue allows attackers to activate actions without proper authentication,...

PT-2025-16507

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows unauthenticated attackers to add devices of other users to their scenes, or arbitrary scenes of other arbitrary users. Recommendations At the moment, there is no information...

CVE-2025-31360: Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

SUSE CVE-2025-2753

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible ...

End-to-End Encrypted Instagram and Messenger Chats: Why It Took Meta 7 Years

Mark Zuckerberg personally promised that the privacy feature would launch by default on Messenger and Instagram chat. WIRED goes behind the scenes of the company’s colossal effort to get it right...

Siemens Teamcenter Visualization and JT2Go Out-of-Bounds Read Vulnerability

Siemens Teamcenter Visualization is a team collaboration software for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to an out-of-bounds read vulnerability that can be exploited by attackers to execute code in the context o...

Siemens Teamcenter Visualization and JT2Go Null Pointer Dereference Vulnerability (CNVD-2022-88428)

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a null pointer dereference vulnerability that could be exploited by an...

SAP 3D Visual Enterprise Viewer .wrl Denial of Service Vulnerability

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A denial of service vulnerability...