CVE-2025-59019: Exposure of Sensitive Information to an Unauthorized Actor

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...

PT-2025-36695

Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 11.0.0 through 11.5.47 TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17 Description: The CSV download feature lacks proper authorization checks. This allows backend users to disclose...

CVE-2025-56267

A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...

CVE-2025-56267

A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...

CVE-2025-56267: Improper Neutralization of Formula Elements in a CSV File

A CSV injection vulnerability in the /idprofiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file...

CVE-2025-56267

Avigilon ACM version v7.10.0.20 is vulnerable to a CSV injection vulnerability in the /id_profiles API endpoint. This flaw allows an attacker to execute arbitrary code by supplying a specially crafted Excel file. As a temporary workaround, it is recommended to restrict access to the /id_profiles ...

CVE-2025-58855

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V Artprima AP HoneyPot WordPress Plugin ap-honeypot allows Reflected XSS.This issue affects AP HoneyPot WordPress Plugin: from n/a through = 1.4...

[SECURITY] Fedora 41 Update: yq-4.47.1-2.fc41

Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...

[SECURITY] Fedora 42 Update: yq-4.47.1-2.fc42

Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...

Exploit for CVE-2021-34527

A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...

MAL-2025-43893 Malicious code in cordelia-csv-nightmare-exosphere (npm)

The package cordelia-csv-nightmare-exosphere was found to contain malicious code...

MAL-2025-43915 Malicious code in csv-readable-exosphere-style-loader (npm)

The package csv-readable-exosphere-style-loader was found to contain malicious code...

MAL-2025-44371 Malicious code in ganymede-helmet-nova-csv (npm)

The package ganymede-helmet-nova-csv was found to contain malicious code...

MAL-2025-45464 Malicious code in ophiuchus-csv-husky-levels (npm)

The package ophiuchus-csv-husky-levels was found to contain malicious code...

MAL-2025-45585 Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)

The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...

MAL-2025-45611 Malicious code in protractor-phoebe-antares-csv (npm)

The package protractor-phoebe-antares-csv was found to contain malicious code...

MAL-2025-45947 Malicious code in sagitta-phoebe-paleoecology-csv (npm)

The package sagitta-phoebe-paleoecology-csv was found to contain malicious code...

Malicious code in ganymede-helmet-nova-csv (npm)

The package ganymede-helmet-nova-csv was found to contain malicious code...

Malicious code in ophiuchus-csv-husky-levels (npm)

The package ophiuchus-csv-husky-levels was found to contain malicious code...

Malicious code in protractor-phoebe-antares-csv (npm)

The package protractor-phoebe-antares-csv was found to contain malicious code...