12 matches found
CVE-2025-22131-PoC
CVE-2025-22131-PoC PoC para CVE-2025-22131 PhpSpreadsheet es una biblioteca escrita en PHP puro y ofrece un conjunto de clases que te permiten leer y escribir varios formatos de archivos de hoja de cálculo como Excel y LibreOffice Calc. phpspreadsheet versión =2.2.0, =2.0.0, =3.0.0, sheetIndex ==...
CVE-2024-47875-PhpSpreadsheet-XSS-PoC
CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Vista General Este es un PoC de la CVE-2025-22131 , una vulnerabilidad de Cross-Site Scripting XSS en PhpSpreadsheet en versiones anteriores a 2.2.2, 2.1.2 y 1.29.4. La vulnerabilidad reside en la función generateNavigation, que no sanitiza los...
CVE-2024-45427-Exploit
Generador de Exploit CVE-2024-45427 Este script genera un archivo malicioso de Excel .xlsx para explotar CVE-2024-45427 en la librería PhpSpreadsheet v3.7.0. Inyecta una carga útil XSS en el nombre de la hoja manipulando el XML sin procesar, evadiendo las comprobaciones de validación estándar de ...
CVE-2026-32950
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...
CVE-2026-32950
SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...
CVE-2026-32950
CVE-2026-32950 affects SQLBot prior to 1.7.0, where an authenticated user can trigger a critical SQL Injection in the /api/v1/datasource/uploadExcel endpoint. The root cause is unsanitized Excel sheet names concatenated into PostgreSQL table names and embedded into COPY statements via f-strings i...
CVE-2007-3490
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls...
CVE-2007-3490
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls...
PT-2007-4751 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel version 2003 SP2 Description: The issue is related to an unspecified vulnerability in Microsoft Excel, potentially connected to the sheet name. It may allow remote attackers to have an unknown impact via unspecified vectors...
Microsoft Excel 20002003 - Sheet Name (PoC)
Microsoft Excel 20002003 - Sheet Name PoC Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...
Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC
Exploit for unknown platform in category dos / poc ====================================================== Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC ====================================================== Tested on: Full Patched Excel 2003 Sp2, CN http://www.inj3ct0r.com/sploits/6415.z...
Microsoft Excel 2000/2003 - Sheet Name (PoC)
Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...