CVE-2024-29375

CSV-Injection-PoC Inyección CSV en Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Puntuación de Impacto: 5.3, Puntuación de Explotación: 1.3 Componentes Afectados: parámetros de Descripción del Proyecto, Identificadores, Nombre del Triángulo Personalizado dentro de...

CVE-2023-36250

CVE-2023-36250 GNOME time tracker 3.0.2版本中存在CSV注入漏洞，允许本地攻击者通过创建新记录时精心构造的.tsv文件执行任意代码。 漏洞类型 CSV注入 发现者 Bruno Teixeira 参考 http://gnome.com 受影响产品代码库 GNOME time tracker v3.0.2 漏洞验证（PoC） 在cmdline字段中使用公式（=3+3）创建新记录时，会在导出为.tsv时产生注入公式的途径。 由此，当有人提取此.tsv文件时，表格软件会将其视为有效公式并执行。...

CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 es vulnerable a la inyección CSV. Proveedor: https://github.com/minical/minical Aplicación de demostración: https://demo.minical.io/ PoC Paso 1: Navegue al módulo de Contabilidad y haga clic en Crear nuevo cliente. Paso 2: Introduzca el payload en el campo Nombre y ha...

CVE-2026-76797

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

CVE-2026-76797 MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

CVE-2026-76797

The MongoSQL Transition Readiness Tool (MongoDB) is vulnerable to CSV injection through its generated reports. Database and collection names are written into CSV output without neutralizing leading characters that spreadsheet applications interpret as formulas. An attacker with write privileges o...

EUVD-2026-67777

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

CVE-2026-19501-poc

CVE-2026-19501 Poc Description: Sureforms ist anfällig für eine nicht authentifizierte CSV-Injection-Schwachstelle, bei der ein Angreifer eine CSV-Formel einschleusen kann, wenn er ein Formular absendet. Diese Formel wird ausgeführt, wenn der Administrator die CSV-Datei exportiert und öffnet. Ste...

CVE-2022-44830

Suggested description Die Sourcecodester Event Registration App v1.0 weist mehrere CSV-Injection-Schwachstellen über die Felder First Name, Contact und Remarks auf. Diese Schwachstellen ermöglichen es Angreifern, über eine präparierte Excel-Datei beliebigen Code auszuführen. Additional Informatio...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: Iniezione CSV in Instant Developer Foundation 25.0.9600 – Prova di concetto PoC 📌 Panoramica Questo repository contiene una prova di concetto PoC per una vulnerabilità di iniezione CSV Formula Injection CVE-2025-60852 che interessa le applicazioni realizzate con il framework Insta...

CVE-2026-56652

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

EUVD-2026-67128

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

CVE-2026-56652

Dool (versions up to 1.3.8 ) is affected by a CSV injection vulnerability in its CSV export functionality. The tool fails to sanitize cell content beginning with special formula characters (=, +, -, or @), allowing a local attacker to craft a process name starting with one of these characters, th...

CVE-2026-56652 Formula Injection in dool project

Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

CVE-2020-25398

CVE-2020-25398 Iniezione CSV presente in InterMind iMind Server fino alla versione 3.13.65 tramite la funzionalità di esportazione CSV. Informazioni Descrizione: Un attaccante può configurare dati specifici, che potrebbero essere esportati in un file CSV malevolo con un payload di esecuzione di...

CSV Injection

Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...

EUVD-2026-64684

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...