7166 matches found
Malicious code in public-csv-carpo-cygnus (npm)
The package public-csv-carpo-cygnus was found to contain malicious code...
Malicious code in yyf-csv (npm)
The package yyf-csv was found to contain malicious code...
Malicious code in csv-hermes-cryonics-solis (npm)
The package csv-hermes-cryonics-solis was found to contain malicious code...
Malicious code in csv-jekyll-equinox-pegasus (npm)
The package csv-jekyll-equinox-pegasus was found to contain malicious code...
Malicious code in csv-module-mocha-lyra (npm)
The package csv-module-mocha-lyra was found to contain malicious code...
Malicious code in csv-mineralogy-pm2-transform (npm)
The package csv-mineralogy-pm2-transform was found to contain malicious code...
CVE-2025-52386
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...
PT-2025-32992 · Unknown · Cyclonedx Sunshine
Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-52386: Improper Neutralization of Formula Elements in a CSV File
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...
CVE-2025-52386
The open-source visualization tool CycloneDX Sunshine version v0.9 is vulnerable to CSV Formula Injection (CWE-1236). The root cause is the software's failure to validate formulas when processing crafted JSON files . This vulnerability can lead to malicious code execution or data exfiltration whe...
CVE-2025-8767: Improper Neutralization of Formula Elements in a CSV File
The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'downloadcsvplayers' and 'downloadcsvgames' functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed...
CVE-2025-8808
A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated...
CVE-2025-8808
CVE-2025-8808 affects xujeff tianti 天梯 up to 2.3. The vulnerability is in the exportOrder function of /tianti-module-admin/user/ajax/save within com.jeff.tianti.controller, enabling CSV injection. Exploitation appears possible remotely and public disclosures exist. Multiple connected sources conf...
CVE-2025-8808: Improper Neutralization of Formula Elements in a CSV File
A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated...
CVE-2012-10043: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
CVE-2025-2028
Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs...
CVE-2025-2028
Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs...
CVE-2025-2028
CVE-2025-2028 affects Check Point Management Log Server. Description: lack of TLS validation when downloading a CSV file that contains IP-to-country mappings used solely for displaying country flags in logs. Root cause: TLS validation is not performed for the CSV download. Impact: integrity could...
