10125 matches found
CVE-2026-53557 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet"tableName" value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBot stores that value without safe...
CVE-2026-53557 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet"tableName" value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBot stores that value without safe...
CVE-2026-53557 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet"tableName" value in the Excel datasource configuration submitted through POST /api/v1/datasource/, and SQLBot stores that value without safe...
CVE-2026-53557
SQLBot , an intelligent Text-to-SQL system built on LLMs and RAG, contains a second-order SQL injection in its Excel datasource handling. Prior to 1.9.0 , an authenticated user can supply a crafted sheet["tableName"] value via POST /api/v1/datasource/, which is stored without safe identifier hand...
Astra Linux – Vulnerability in Firefox and Thunderbird
Excel .xll add-ins did not have a blocklist entry in Firefox’s executable blocklist, which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...
Security Updates for Microsoft Excel Products C2R (September 2026)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-78518 - Heap-based buffer overflow in Microsoft Office Excel...
Security Updates for Microsoft Office Online Server (September 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-81947...
Security Updates for Microsoft Excel Products (September 2026)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-78512 - Out-of-bounds read in Microsoft Office Excel...
Security Updates for Microsoft Office Products (September 2026)
The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. CVE-2026-64918 - Heap-based buffer overflow in...
EUVD-2026-69706
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path...
GHSA-C7R6-VX3H-W5G2 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the store process. An attacker can overwrite arbitrary existing files writable by the PHP process with partially controlled content by supplying a crafted export path, potentially leading to...
CVE-2026-85875
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-81959
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81957
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81960
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81956
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...