PhpSpreadsheet 1.5.0 XXE vulnerability reproduction and analysis-vulnerability warning-the black bar safety net

0x01 introduction PhpSpreadsheet is a very popular pure PHP class library that allows you to easily read and write Excel, LibreOffic Calc and other spreadsheet file formats, is PHPExcel alternative. 2018 11 October 13, PhpSpreadsheet was broke presence of the XXE vulnerability, CVE-2018-19277, in...

RogueRobin Malware Uses Google Drive as C2 Channel

A custom malware used by the APT known as DarkHydrus uses a mix of novel techniques, including using Google Drive as an alternate command-and-control C2 channel. According to Palo Alto’s Unit 42 intelligence division, the targeted attack involved spear-phishing emails written in Arabic sent to...

New malware found using Google Drive as its command-and-control server

Since most security tools also keep an eye on the network traffic to detect malicious IP addresses, attackers are increasingly adopting infrastructure of legitimate services in their attacks to hide their malicious activities. Cybersecurity researchers have now spotted a new malware attack campai...

The vulnerability of Microsoft Excel’s spreadsheet editor lies in errors related to object processing mechanisms in memory, which allow attackers to execute arbitrary code with privileges of the current user.

The vulnerability of Microsoft Excel editors is related to errors in the memory handling of objects. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current user, using specially crafted content...

The vulnerability of Excel spreadsheet editors, related to errors in memory object processing, allows attackers to gain access to protected information.

The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...

The vulnerability affects the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office applications and Office 365, the Microsoft Office Compatibility Pack, the Microsoft Windows operating system, the Microsoft PowerPoint Viewer for presentation viewing, and the Microsoft Office Word Viewer for document reading. This allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a spreadsheet software; Microsoft Office and Office 365 applications; the Microsoft Office Compatibility Pack; the Microsoft Windows operating system; the Microsoft PowerPoint Viewer, a presentation software; and...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2596760)

This host is missing an important security update according to Microsoft KB2596760 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2019-0541

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer,...

Description of the security update for Office 2010: January 8, 2019

Description of the security update for Office 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Excel Viewer 2007: January 8, 2019

Description of the security update for Excel Viewer 2007: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...

KLA11396 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Microsoft Internet Explorer CVE-2019-0541 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Faile...

The vulnerability of Microsoft Excel’s spreadsheet editor arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Excel spreadsheet editors arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of Microsoft Excel editors arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Excel spreadsheet editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a local attacker to disclose protected information using a specially crafted file...

The vulnerability of Excel spreadsheet editors, related to data processing errors, allows attackers to execute arbitrary code.

The vulnerability of Excel spreadsheet editors is related to data processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Denial of service vulnerability in libxls (CNVD-2019-01502)

libxls is a C library for reading Exce xls files. A denial of service vulnerability exists in libxls, which can be exploited by an attacker to cause a denial of service...

Libxls Double Release Vulnerability

libxls is a C library that can read Excel xls files. A double release vulnerability exists in the readMSAT function in ole.c in libxls 1.4.0. An attacker could cause a denial of service application crash by exploiting this vulnerability via a specially crafted file...

Exel Password Recovery 8.2.0.0 - Local Buffer Overflow Denial of Service

Exploit Title: Excel Password Recovery Professional Date: 15-12-2018 Vendor Homepage:https://www.recoverlostpassword.com/ Software Link :https://www.recoverlostpassword.com/downloads/excelpasswordrecoveryprotrial.exe Exploit Author: Achilles Tested Version: 8.2.0.0 Tested on: Windows 7 64...

Exel Password Recovery 8.2.0.0 - Local Buffer Overflow Denial of Service

Exel Password Recovery 8.2.0.0 - Local Buffer Overflow Denial of Service Exploit Title: Excel Password Recovery Professional Date: 15-12-2018 Vendor Homepage:https://www.recoverlostpassword.com/ Software Link :https://www.recoverlostpassword.com/downloads/excelpasswordrecoveryprotrial.exe Exploit...

Exel Password Recovery 8.2.0.0 Buffer Overflow / Denial Of Service

Exploit Title: Excel Password Recovery Professional Date: 15-12-2018 Vendor Homepage:https://www.recoverlostpassword.com/ Software Link :https://www.recoverlostpassword.com/downloads/excelpasswordrecoveryprotrial.exe Exploit Author: Achilles Tested Version: 8.2.0.0 Tested on: Windows 7 64...