Lucene search
+L

1986 matches found

Kitploit
Kitploit
added 2026/08/31 5:44 p.m.5 views

CVE-2024-29375

CSV-Injection-PoC Inyección CSV en Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Puntuación de Impacto: 5.3, Puntuación de Explotación: 1.3 Componentes Afectados: parámetros de Descripción del Proyecto, Identificadores, Nombre del Triángulo Personalizado dentro de...

9.8CVSS5.9AI score0.01463EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:01 p.m.3 views

CVE-2023-36250

CVE-2023-36250 GNOME time tracker 3.0.2版本中存在CSV注入漏洞,允许本地攻击者通过创建新记录时精心构造的.tsv文件执行任意代码。 漏洞类型 CSV注入 发现者 Bruno Teixeira 参考 http://gnome.com 受影响产品代码库 GNOME time tracker v3.0.2 漏洞验证(PoC) 在cmdline字段中使用公式(=3+3)创建新记录时,会在导出为.tsv时产生注入公式的途径。 由此,当有人提取此.tsv文件时,表格软件会将其视为有效公式并执行。...

7.8CVSS7.4AI score0.00556EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 7:51 a.m.6 views

CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 es vulnerable a la inyección CSV. Proveedor: https://github.com/minical/minical Aplicación de demostración: https://demo.minical.io/ PoC Paso 1: Navegue al módulo de Contabilidad y haga clic en Crear nuevo cliente. Paso 2: Introduzca el payload en el campo Nombre y ha...

8.8CVSS7.2AI score0.01163EPSS
SaveExploits1References1
NVD
NVD
added 2026/08/28 8:19 p.m.8 views

CVE-2026-76797

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

6.3CVSS0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/28 7:24 p.m.32 views

CVE-2026-76797 MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

6.3CVSS0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/28 7:24 p.m.13 views

CVE-2026-76797

The MongoSQL Transition Readiness Tool (MongoDB) is vulnerable to CSV injection through its generated reports. Database and collection names are written into CSV output without neutralizing leading characters that spreadsheet applications interpret as formulas. An attacker with write privileges o...

6.3CVSS6AI score0.00247EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 7:24 p.m.10 views

EUVD-2026-67777

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

6.3CVSS6AI score0.00247EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 7:06 p.m.6 views

CVE-2026-19501-poc

CVE-2026-19501 Poc Description: Sureforms ist anfällig für eine nicht authentifizierte CSV-Injection-Schwachstelle, bei der ein Angreifer eine CSV-Formel einschleusen kann, wenn er ein Formular absendet. Diese Formel wird ausgeführt, wenn der Administrator die CSV-Datei exportiert und öffnet. Ste...

8.8CVSS5.9AI score0.00466EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 2:56 p.m.4 views

CVE-2022-44830

Suggested description Die Sourcecodester Event Registration App v1.0 weist mehrere CSV-Injection-Schwachstellen über die Felder First Name, Contact und Remarks auf. Diese Schwachstellen ermöglichen es Angreifern, über eine präparierte Excel-Datei beliebigen Code auszuführen. Additional Informatio...

7.8CVSS7.1AI score0.00558EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 2:40 a.m.4 views

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: Iniezione CSV in Instant Developer Foundation 25.0.9600 – Prova di concetto PoC 📌 Panoramica Questo repository contiene una prova di concetto PoC per una vulnerabilità di iniezione CSV Formula Injection CVE-2025-60852 che interessa le applicazioni realizzate con il framework Insta...

6.5CVSS5.9AI score0.00381EPSS
SaveExploits0
NVD
NVD
added 2026/08/27 5:18 p.m.6 views

CVE-2026-56652

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

4.6CVSS0.00152EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 1:22 p.m.30 views

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

4.6CVSS0.00152EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 1:22 p.m.8 views

EUVD-2026-67128

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

4.6CVSS5.3AI score0.00152EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 1:22 p.m.12 views

CVE-2026-56652

Dool (versions up to 1.3.8 ) is affected by a CSV injection vulnerability in its CSV export functionality. The tool fails to sanitize cell content beginning with special formula characters (=, +, -, or @), allowing a local attacker to craft a process name starting with one of these characters, th...

4.6CVSS5.3AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 1:22 p.m.8 views

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

4.6CVSS5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/27 1:32 a.m.4 views

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 7:38 a.m.4 views

CVE-2020-25398

CVE-2020-25398 Iniezione CSV presente in InterMind iMind Server fino alla versione 3.13.65 tramite la funzionalità di esportazione CSV. Informazioni Descrizione: Un attaccante può configurare dati specifici, che potrebbero essere esportati in un file CSV malevolo con un payload di esecuzione di...

8.8CVSS8.2AI score0.01978EPSS
SaveExploits1References1
Snyk
Snyk
added 2026/08/24 2:07 a.m.7 views

CSV Injection

Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...

8.4CVSS6AI score0.00295EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 12:30 a.m.11 views

EUVD-2026-64684

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

8.4CVSS5.5AI score0.00295EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/24 12:30 a.m.37 views

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...

8.4CVSS5.9AI score0.00295EPSS
SaveExploits0References4
Rows per page
Query Builder