CVE-2025-1274
published 2025-04-15CVE-2025-1274: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this…
PriorityP341high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.22%
12.4th percentile
A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autodesk | advance_steel | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | advance_steel | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | advance_steel | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_architecture | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_architecture | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_architecture | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_electrical | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_electrical | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_electrical | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_lt | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_lt | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_lt | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_map_3d | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_map_3d | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_map_3d | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_mechanical | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_mechanical | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_mechanical | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_mep | >= 2023 < 2023.1.8 | 2023.1.8 |
| autodesk | autocad_mep | >= 2024 < 2024.1.8 | 2024.1.8 |
| autodesk | autocad_mep | >= 2025 < 2025.1.3 | 2025.1.3 |
| autodesk | autocad_plant_3d | >= 2023 < 2023.1.8 | 2023.1.8 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Spotipy has a XSS vulnerability in its OAuth callback server
ghsa·2025-12-01
CVE-2025-66040 [LOW] CWE-79 Spotipy has a XSS vulnerability in its OAuth callback server
Spotipy has a XSS vulnerability in its OAuth callback server
### Summary
XSS vulnerability in OAuth callback server allows JavaScript injection through unsanitized error parameter. Attackers can execute arbitrary JavaScript in the user's browser during OAuth authentication.
### Details
**Vulnerable Code:** `spotipy/oauth2.py` lines 1238-1274 (RequestHandler.do_GET)
**The Problem:**
During OAuth flow, spotipy starts a local HTTP server to receive callbacks. The server reflects the `error` URL parameter directly into HTML without sanitization.
**Vulnerable code at line 1255:**
```python
status = f"failed ({self.server.error})"
```
**Then embedded in HTML at line 1265:**
```python
self._write(f"""
Authentication status: {status}
""")
```
The `error` parameter comes from URL parsing (
GHSA
GHSA-7wf3-fr96-gq58: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
ghsa_unreviewed·2025-04-15
CVE-2025-1274 [HIGH] CWE-787 GHSA-7wf3-fr96-gq58: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Suricata
ET WEB_SPECIFIC_APPS Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)
suricata·2025-11-12·CVSS 9.8
CVE-2021-21805 [CRITICAL] ET WEB_SPECIFIC_APPS Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)
ET WEB_SPECIFIC_APPS Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)"; flow:established,to_server; http.uri; content:"/php/ping.php|3f|"; fast_pattern; content:"hostname|3d|"; pcre:"/^[^&$]*?(?:[\x3b\x24\x60\x7c]|\x25(?:3[bB]|24|60|7[cC]))/R"; http.method; content:"GET"; reference:url,www.talosintelligence.com/vulnerability_reports/TALOS-2021-1274; reference:cve,2021-21805; classtype:web-application-attack; sid:2065739; rev:1; metadata:attack_target Server, tls_state TLSDecrypt, created_at 2025_11_12, cve CVE_2021_21805, deployment Perimeter, deployment Internal, deployment SSLDecrypt, confidence High, signature_severity Major, tag Exploit, tag
No public exploits indexed.
No writeups or analysis indexed.
2025-04-15
Published