CVE-2025-58051: Improper Enforcement of Behavioral Workflow

Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leake...

EUVD-2019-0766

Malware in sbrugna...

EUVD-2021-0945

Malware in sbrugna...

EUVD-2024-3140

Malicious code in bioql PyPI...

EUVD-2024-2584

Malicious code in bioql PyPI...

EUVD-2024-3153

Malicious code in bioql PyPI...

EUVD-2024-3279

Malicious code in bioql PyPI...

EUVD-2024-3208

Malicious code in bioql PyPI...

EUVD-2025-0039

Malicious code in bioql PyPI...

EUVD-2025-0053

Malicious code in bioql PyPI...

EUVD-2025-0050

Malicious code in bioql PyPI...

EUVD-2025-0021

Malicious code in bioql PyPI...

EUVD-2025-0033

Malicious code in bioql PyPI...

EUVD-2025-0028

Malicious code in bioql PyPI...

EUVD-2025-0027

Malicious code in bioql PyPI...

EUVD-2025-0143

Malicious code in bioql PyPI...

Server-Side Request Forgery (SSRF)

phpoffice/phpspreadsheet is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation because the setPath method in the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class allows attackers to craft requests to internal resources...

Exploit for Cross-site Scripting in Phpoffice Phpspreadsheet

CVE-2025-22131 POC CVE-2025...

Exploit for Cross-site Scripting in Phpoffice Phpspreadsheet

CVE-2025-22131-PoC PoC for CVE-2025-22131 PhpSpreadsheet...

Server-side Request Forgery (SSRF)

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the setPath method of the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class, where a user...