EUVD-2020-3886

Malware in sbrugna...

CVE-2020-11534

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...

CVE-2020-11534

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...

PT-2020-12671

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Document Server version 5.5.0 Description An issue was discovered that allows an attacker to craft a malicious .docx file and exploit the NSFileDownloader function. This exploitation enables the attacker to pass parameters to a...

CVE-2020-11534: Improper Input Validation

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...