Design/Logic Flaw

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in Workday through 32 via a value provided by a low-privileged user in a contact form field that is mishandled in a CSV export...

CVE-2019-12134

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in Workday through 32 via a value provided by a low-privileged user in a contact form field that is mishandled in a CSV export...

CVE-2019-12134

CVE-2019-12134 describes a CSV/Formula injection in the Workday export feature. A value supplied by a low-privileged user in a contact form is mishandled during CSV export, potentially enabling Excel formula injection when opened in spreadsheet software. The connected documents confirm the vulner...

CVE-2019-12134

CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in Workday through 32 via a value provided by a low-privileged user in a contact form field that is mishandled in a CSV export...

CVE-2018-12244

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

CVE-2018-12244

CVE-2018-12244 affects the SEP for Mac client, from versions before 12.1 RU6 MP9 and before 14.2 RU1. The issue is a CSV/DDE (formula) injection vulnerability where untrusted input placed in CSV files can be interpreted as commands or formulas by the application. The connected sources document th...

CVE-2018-12244: Improper Neutralization of Formula Elements in a CSV File

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

Who has the fastest website in F1?

I was trying to make my predictions for the new Formula One season by studying the aerodynamics of the cars, their cornering speeds, their ability to run with different amounts of fuel. Then it hit me: I have no idea what I'm doing. So, I'm going to make my predictions the only way I know how: By...

Stack Overflow Vulnerability in WPS Office Formula Object Module

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A heap overflow vulnerability exists in the WPS OFFICE formula object module. An attacker...

Design/Logic Flaw

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

Design/Logic Flaw

typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula...

CVE-2019-7295

typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula...

CVE-2019-7296

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

CVE-2019-7296

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

CVE-2019-7296

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

CVE-2019-7295

typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula...

CVE-2019-7296

CVE-2019-7296 affects Typora up to version 0.9.64, where an XSS vulnerability in the inline rendering of mathematical formulas can lead to remote command execution. The incident is documented across multiple feeds (NVD, Red Hat, CVE lists). The core issue is a cross-site scripting flaw that can b...

CVE-2019-7295: Improper Neutralization of Input During Web Page Generation

typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula...

CVE-2019-7296: Improper Neutralization of Input During Web Page Generation

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

Anviz AIM CrossChex Standard 4.3 Excel Macro Injection Vulnerability

CSV XLS Injection Excel Macro Injection or Formula Injection exists in the AIM CrossChex version 4.3 when importing or exporting users using xls Excel file. This can be exploited to execute arbitrary commands on the affected system via SE attacks when an attacker inserts formula payload in the Na...