6907 matches found
CVE-2026-109396 Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports
Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields. Attackers can submit names, addresses or phone values starting with =, +,...
CVE-2026-109396 Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports
Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields. Attackers can submit names, addresses or phone values starting with =, +,...
CVE-2026-93581
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
UBUNTU-CVE-2026-93581
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
CVE-2026-93581
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
EUVD-2026-97270
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
CVE-2026-93581 Insufficient Neutralization of Formula Elements in CSV Exports
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
CVE-2026-93581
The OTRS help desk software (versions 7.0.X , 8.0.X , 2023.X , 2024.X , 2025.X , and 2026.X before 2026.7.X ) is vulnerable to CWE-1236 due to insufficient neutralization of formula elements in CSV exports . An attacker can inject values starting with characters like =, +, -, or @ through user in...
hostintel
hostintel Esta herramienta se utiliza para recopilar diversas fuentes de inteligencia sobre hosts. Hostintel está escrito de forma modular para que se puedan añadir fácilmente nuevas fuentes de inteligencia. Los hosts se identifican por nombre de host FQDN, dominio o dirección IP. Esta herramient...
CVE-2026-109396: Improper Neutralization of Formula Elements in a CSV File
Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fields. Attackers can submit names, addresses or phone values starting with =, +,...
CVE-2026-93581: Improper Neutralization of Formula Elements in a CSV File
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV...
PT-2026-110492
Name of the Vulnerable Software and Affected Versions OTRS versions 7.0.X through 2026.6.X OTRS Community Edition versions 6.x and earlier Description User-controlled values are not sufficiently neutralized when included in CSV exports. Data submitted by authenticated users or received via extern...
PT-2026-110625
Name of the Vulnerable Software and Affected Versions Thelia versions prior to 3.1.2 Thelia versions 3.2.x prior to 3.2.1 Description An issue exists where unauthenticated visitors can perform CSV formula injection by providing specially crafted data in registration, checkout, or newsletter field...
autotimeliner
AutoTimeliner Extrae automágicamente una línea de tiempo forense de volcados de memoria volátil. AutoTimeliner ejecuta múltiples plugins de Volatility3 contra imágenes de memoria de Windows, Linux y macOS, y luego fusiona sus salidas en una única línea de tiempo CSV ordenada: Plugin de línea de...
godehashed
Godehashed Una herramienta en golang que utiliza la API de dehashed.com para buscar activos comprometidos. Los resultados se pueden compilar en un CSV para su posterior análisis. Captura de pantalla Dehashed API Debes proporcionar una clave API a la herramienta. Consulta apikeytemplate.txt como...
creepy
creepy Versión actual 1.1 Autor Yiannis Kakavas Página principal http://www.geocreepy.com Instrucciones de instalación Consulte http://www.geocreepy.com Descripción Herramienta OSINT de geolocalización. Creepy es una herramienta OSINT de geolocalización. Recopila información relacionada con la...
fileintel
fileintel Esta es una herramienta utilizada para recopilar diversas fuentes de inteligencia para un archivo determinado. Fileintel está escrito de forma modular para que se puedan agregar fácilmente nuevas fuentes de inteligencia. Los archivos se identifican por su hash MD5, SHA1, SHA256. La sali...
CVE-2026-45440
Administrator SQL Injection in WP Ultimate CSV Importer = 9.2 versions...