CVE-2021-42292

CVE-2021-42292 이 패키지는 CVE-2021-42292의 익스플로잇을 탐지합니다. 이 취약점은 Microsoft Excel의 로컬 권한 상승 취약점이며, notice.log에 알림을 생성합니다. https://corelight.com/blog/detecting-cve-2021-42292 탐지 방법: 이 패키지는 트리거 역할을 하는 Excel 스프레드시트가 두 번째 스프레드시트를 다운로드할 때 취약점을 탐지합니다. 두 번째 스프레드시트는 상승된 권한으로 실행됩니다. 이 스크립트를 사용하여 Microsoft Excel이...

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. id: CVE-2023-29887 info: name: Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion author: ctflearner severity: high description: | A Local...

perl_spreadsheet_excel_rce_poc

ParseExcel 보안 취약점 TL;DR: 형식 문자열 파싱 로직에서 발생하는 RCE. 익스플로잇에 대한 간략한 설명 익스플로잇의 근본 원인은 Utility.pm에서 검증되지 않은 사용자 입력에 대해 eval을 호출하는 데서 비롯됩니다. https://github.com/jmcnamara/spreadsheet-parseexcel/blob/e33d626d9b9cec91be7520dec1686712313957fb/lib/Spreadsheet/ParseExcel/Utility.pmL171 Uitlity.pm sub ExcelFmt...

cypheroth

Cypheroth Автоматизированный расширяемый набор инструментов для выполнения cypher-запросов к Neo4j-бэкенду Bloodhound и сохранения результатов в электронные таблицы. Описание Это bash-скрипт, который автоматизирует выполнение cypher-запросов к данным Bloodhound, хранящимся в базе данных Neo4j. Я...

CVE-2025-48129

🚨 CVE-2025-48129 - 워드프레스 Spreadsheet Price Changer 플러그인의 권한 상승 🛡️ 취약점 요약 영향을 받는 플러그인 : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 취약한 버전 : 분류 기준: OWASP A7 – 식별 및 인증 실패 🧪 익스플로잇 스크립트 개요 이 Python 스크립트는 취약한 버전의 플러그인을 대상으로 하며, 이메일과 비밀번호MD5로 해시됨만 사용하여 새로운 WordPress 관리자를 등록합니다. ▶️...

CVE-2024-53924

CVE-2024-53924 설명: Pycel 1.0b30 버전까지는 신뢰할 수 없는 스프레드시트를 처리할 때, =IFA1=200, eval"import'os'.system 하위 문자열로 시작하는 셀의 조작된 수식을 통해 코드 실행이 가능합니다. 작성자: Adham Elmosalamy @aelmo 공개 날짜: 2024년 11월 23일 링크: https://nvd.nist.gov/vuln/detail/CVE-2024-53924 요약 Excel 워크시트 작업 및 Excel 수식의 기호적 안전 평가를 위한 Python 라이브러리인...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: Instant Developer Foundation 25.0.9600의 CSV 인젝션 – 개념 증명PoC 📌 개요 이 저장소에는 Instant Developer Foundation 프레임워크 25.0.9600 이전 버전로 빌드된 애플리케이션에 영향을 미치는 CSV 인젝션 Formula Injection 취약점CVE-2025-60852에 대한 개념 증명PoC이 포함되어 있습니다. 취약한 프레임워크로 빌드된 애플리케이션은 CSV 형식으로 데이터를 내보낼 때 사용자 입력을 제대로 필터링하지 않습니다...

CVE-2026-105749 Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/htmlbackend.py, docling/backend/jatsbackend.py, and...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...

xlsx

SheetJS SheetJS Community Edition은 거의 모든 복잡한 스프레드시트에서 유용한 데이터를 추출하고, 레거시 및 최신 소프트웨어 모두에서 작동하는 새 스프레드시트를 생성하기 위한 실전 검증된 오픈소스 솔루션을 제공합니다. SheetJS Pro는 데이터 처리 그 이상의 솔루션을 제공합니다: 복잡한 템플릿을 쉽게 편집하고, 스타일링으로 내면의 피카소를 꺼내며, 이미지/그래프/피벗 테이블이 있는 사용자 지정 시트를 만들고, 수식 표현식을 평가하고 계산을 웹 앱으로 포팅하며, 일반적인 스프레드시트 작업을 자동화하...

[SECURITY] Fedora 45 Update: gnumeric-1.12.59-8.fc45

Gnumeric is a spreadsheet program for the GNOME GUI desktop environment...

AlmaLinux 9.2 [TuxCare] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747253770)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747253770 advisory. - Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in SpreadsheetHandlerImpl.updateCellComment, which writes the supplied text to the target cell without checking whether the active sheet is protected or the cell locked, unlike the edit, cut, and paste handlers i...

CVE-2026-93547

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

EUVD-2026-89952

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

CVE-2026-93547 Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

CVE-2026-93547

The Vaadin Spreadsheet component (including the Spreadsheet add-on for Vaadin Framework 7 and 8) contains a missing authorization check that allows authenticated users to add or replace cell comments on sheets with enabled protection, including locked cells. The underlying cause is that the handl...

CVE-2026-93547 Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

CVE-2026-93547 Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

PT-2026-103275

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...