107 matches found
CVE-2025-51735
HCL Technologies Ltd. Unica version 12.0.0 is vulnerable to a CSV formula injection vulnerability (CWE-1236). This issue allows for potential manipulation through the use of crafted CSV files . While a specific exploit link is referenced in external sources, no direct exploit code or specific pro...
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-51735: Improper Neutralization of Formula Elements in a CSV File
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
EUVD-2025-199873
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...
CVE-2025-11498
CVE-2025-11498 affects the System Diagnostics Manager (SDM) component of B&R Automation Runtime before 6.4. The issue is an Improper Neutralization of Formula Elements in a CSV File, allowing a remote attacker to inject formula data into a generated CSV. Exploitation requires the attacker to craf...
EUVD-2020-18132
Malware in sbrugna...
EUVD-2021-10381
Malware in sbrugna...
EUVD-2021-22954
Malware in sbrugna...
CVE-2025-52386
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...
CVE-2025-52386: Improper Neutralization of Formula Elements in a CSV File
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...
PT-2025-32992 · Unknown · Cyclonedx Sunshine
Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-52386
The open-source visualization tool CycloneDX Sunshine version v0.9 is vulnerable to CSV Formula Injection (CWE-1236). The root cause is the software's failure to validate formulas when processing crafted JSON files . This vulnerability can lead to malicious code execution or data exfiltration whe...
CVE-2023-46401
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...
CVE-2020-25445
The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells are executed...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...
CVE-2023-46401
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...
PT-2025-1510
Name of the Vulnerable Software and Affected Versions KWHotel version 0.47 Description The issue concerns CSV Formula Injection in the add guest function. This allows for potential exploitation through crafted CSV formulas. No information is provided about the estimated number of potentially...