497 matches found
manageengine-auditad-cve-2022-28219
私のCVE-2022-28219分析を支援するコード。 実行するには、RubyとRubygemsがインストールされている必要があります： root@kitploit: gem install httparty ruby ./manageengine-poc.rb これは概念実証（PoC）として設計されており、安定したエクスプロイトではありません。calcのみを実行します。:...
CVE-2012-4792
CVE-2012-4792 CVE-2012-4792 簡単な計算機の悪用...
win-exec-calc-shellcode
win-exec-calc-shellcode calc.exe を実行する小さな NUL フリーのシェルコードです。 x86 および x64 版の Windows 5.0〜6.3 2000、XP、2003、2008、7、8、8.1 の全サービスパックで動作します。 サイズ build 306 プラットフォーム | サイズ | スタック整列 | 関数ラッパー | 関数+レジスタ保存 | 関数+スタック | 関数+スタック+レジスタ ---|---|---|---|---|---|--- x86 | 72 | 75 | 77 | 77 | 84 | 84 x64 | 85 | 90 | 9...
CVE-2012-1876
CVE-2012-1876 CVE-2012-1876 シンプルな calc エクスプロイト...
Astra Linux – Vulnerability in OpenCV
A issue was discovered in OpenCV before versions 3.4.7 and 4.x before version 4.1.1. There is an out-of-bounds read/write operation in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to a denial of service...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm/mglru: The issue of division by zero in vmpressurecalclevel has been fixed. evictfolios uses a second pass to reclaim folios that have undergone page writeback and become clean before the first pass is completed. This is becau...
Astra Linux – Vulnerability in LibreOffice
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow occurred when compiling a very long formula consisting of many opening tokens. The array that tracks nesting depth was allocated with one element too small in the worst-case scenario; as a result, such a...
Astra Linux – Vulnerability in LibreOffice
LibreOffice Calc can import tracked changes from a spreadsheet document. There was a heap buffer overflow issue when a document reused the same change identifier for two different types of changes. The importer treated one change object as a different, larger type and exceeded the allocated memor...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then a division is performed. This could lead to a divide by 0 error. Example: echo 8:0...
CVE-2026-86257: Improper Neutralization of Formula Elements in a CSV File
wger before 2.6 fails to sanitize firstname and lastname fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas. Attackers can inject formulas like =HYPERLINK to exfiltrate admin data or execute code when admins open the exported file in Excel or...
CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
EUVD-2026-64322
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-77992
Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by a heredoc terminator breakout in the calc element . The root cause is that the onUpdateComment endpoint did not perform any access checks, allowing unauthenticated network-based attacks with low complexity and no ...
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
PT-2026-79587
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-77992: Improper Control of Generation of Code
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
PT-2026-77676
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculati...
CVE-2026-47705: Improper Neutralization of Formula Elements in a CSV File
TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...