Microsoft Office Excel Security Feature Bypass

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document. The security feature bypass by itself does not allow arbitrary code execution. To successfully exploit the vulnerability, an attacker would have to embed a control in ...

Automatic macro execution bug in Office Mac _when_ macros are disabled

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka ‘Microsoft Office Excel Security Feature Bypass’. Recent assessments: busterb at November 14, 2019 10:37pm UTC reported: Saw this on Patrick Wardle’s twitter accou...

CVE-2019-1457: Incorrect Permission Assignment for Critical Resource

A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Microsoft Office Excel Security Feature Bypass'...

PT-2019-3915

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to insufficient input validation in Microsoft Office, which can be exploited by a remote attacker using a specially crafted file to execute arbitrary code. A...

EulerOS 2.0 SP5 : libreoffice (EulerOS-SA-2019-2169)

According to the version of the libreoffice packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over,...

November 5, 2019, update for Access 2016 (KB4475539)

None None...

Microsoft Office365 Integrity Validation / Remote Code Execution

Exploit Title: Microsoft Office365 Remote Code Execution Vulnerability Date: 2/11/19 Exploit Author: Social Engineering Neo - @EngineeringNeo Vendor Homepage: https://microsoft.com Software Link: https://office.com Version: Office365/ProPlus build 16.0.11727.20222, 16.0.11901.20170,...

Microsoft Office365 Protection Bypass / Remote Code Execution

Exploit Title: Microsoft Office365 Remote Code Execution Vulnerability Date: 2/11/19 Exploit Author: Social Engineering Neo - @EngineeringNeo Vendor Homepage: https://microsoft.com Software Link: https://office.com Version: Office365/ProPlus build 16.0.11727.20222, 16.0.11901.20170,...

Microsoft Office 365 / ProPlus 16.0.11929.202.88 docx2docm Protection Bypass Vulnerability

Exploit Title: Microsoft Office365 Remote Code Execution Vulnerability Date: 2/11/19 Exploit Author: Social Engineering Neo - @EngineeringNeo Vendor Homepage: https://microsoft.com Software Link: https://office.com Version: Office365/ProPlus build 16.0.11727.20222, 16.0.11901.20170,...

Microsoft Office 365 / ProPlus 16.0.11929.202.88 Remote Code Execution Vulnerability

Exploit Title: Microsoft Office365 Remote Code Execution Vulnerability Date: 2/11/19 Exploit Author: Social Engineering Neo - @EngineeringNeo Vendor Homepage: https://microsoft.com Software Link: https://office.com Version: Office365/ProPlus build 16.0.11727.20222, 16.0.11901.20170,...

CVE-2013-1666

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

Code injection

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

CVE-2013-1666

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

CVE-2013-1666

Affected product: Foswiki versions before 1.1.8. The vulnerability is in the MAKETEXT macro, enabling code injection that can lead to arbitrary code execution on the server (per the Foswiki advisory). Attack surface includes crafting MAKETEXT macro invocations on wiki pages when localization is e...

CVE-2013-1666

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

PT-2019-6849

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.8 Description The issue is related to a code injection vulnerability in the MAKETEXT macro. Recommendations For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue...

CVE-2013-1666: Improper Control of Generation of Code

Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...

UBUNTU-CVE-2019-8287

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity...

CVE-2009-1371

The CLIISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service application crash via a malformed file with UPack encoding...

CVE-2019-9853

LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw existed in how the urls to the macros within the document were processed and categorized, resulting in...