35 matches found
CVE-2026-97875 DNS rebinding vulnerability in rojo serve HTTP API
Rojo's "rojo serve" HTTP API default port 34872 has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, write malicious code to files on disk, and launch local programs via opener::open with no user interaction beyond visiting...
CVE-2021-27399
A vulnerability has been identified in Simcenter Femap 2020.2 All versions V2020.2.MP3, Simcenter Femap 2021.1 All versions V2021.1.MP3. The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an...
CVE-2021-33015
Cscape All Versions prior to 9.90 SP5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process...
CVE-2023-45678
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in startdecoder because at maximum m-submaps can be 16 but submapfloor and submapresidue are declared as arrays of 15 elements. This issue may lead to code execution...
CVE-2022-23431
An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...
EUVD-2020-20998
Malware in sbrugna...
EUVD-2021-26179
Malware in sbrugna...
EUVD-2024-29837
Malicious code in bioql PyPI...
EUVD-2022-32727
Malicious code in bioql PyPI...
EUVD-2023-49967
Malicious code in bioql PyPI...
EUVD-2022-28900
Malicious code in bioql PyPI...
EUVD-2025-24508
Malicious code in bioql PyPI...
EUVD-2024-34616
Malicious code in bioql PyPI...
EUVD-2025-7747
Malicious code in bioql PyPI...
CVE-2025-54208 InDesign Desktop | Out-of-bounds Write (CWE-787)
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Adobe Photoshop 25.x < 25.12.4 / 26.x < 26.9 Vulnerability (APSB25-75)
The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.4/26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-75 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2025-49570 Note that Nessus has no...
CVE-2025-21166
Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-43581
CVE-2025-43581 affects Substance3D Sampler (5.0 and earlier) with an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the vulnerability in S...
CVE-2023-45677
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if len read in startdecoder is a negative number and setupmalloc successfully allocates memory in that case, but memor...