ExploitPOC_MS15-014_CVE-2015-0009

This repository does not have a README...

CVE-2021-46363

CVE-2021-46363: Formula Injection in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported...

CVE-2026-112248

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated...

CVE-2026-112248 grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated...

CVE-2026-112248 grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated...

EUVD-2026-104526

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated...

CVE-2026-112248

A security vulnerability exists in grandnode grandnode2 versions up to 2.3.0 . The issue is located within the Excel Import component, specifically in the ProductImportDataObject.PrepareProductPictures function. Attackers can initiate a remote attack by manipulating the Picture1/Picture2/Picture3...

CVE-2026-112248 grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated...

CVE-2024-53924

CVE-2024-53924 Description: Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval"import'os'.system substring. Author: Adham Elmosalamy @aelmo Date of Disclosure: November 23, 2024...

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

ThreatScraper

ThreatScraper ThreatScraper is a Python-based tool designed to check virus information by using VirusTotal API. It offers functionalities such as scheduling the checking at specific times, showing and saving the graph of malware detection trends, as well as saving virus information to an Excel...

CVE-2026-111127

A flaw was found in catdoc. An attacker can exploit this vulnerability by convincing a user to process a specially crafted Microsoft Excel .xls file. Because the application fails to properly validate string lengths when parsing spreadsheet records, it reads beyond allocated memory buffers. This...

CVE-2026-108446

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-108446

A Use after free vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) . No specific component, root cause, or exploit details are provided in the documenta...

EUVD-2026-102458

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-108446: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-115248

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free issue exists in Microsoft Office Excel. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory corrupti...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Security Updates for Microsoft Excel Products C2R (October 2026)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-97003, CVE-2026-97004, CVE-2026-97007, CVE-2026-97741,...