168 matches found
OnlyOffice-path-traversal
ONLYOFFICE Path-Traversal-Exploit CVE-2023-46988 📌 Überblick Dieses Skript nutzt eine Path-Traversal-Schwachstelle im ONLYOFFICE Document Server CVE-2023-46988 aus, die es nicht autorisierten Benutzern ermöglicht, beliebige Dateien vom Server zu kopieren. Die Schwachstelle befindet sich im Endpun...
CVE-2026-41034
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...
CVE-2026-7314
A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function getdocpath of the file src/spiredocmcp/api/base.py. Performing a manipulation of the argument documentname results in path traversal. The attack can be initiated remotely. The exploit is now public and...
EUVD-2025-205393
ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...
EUVD-2025-205392
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...
CVE-2025-68936
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...
CVE-2025-68936
Summary: CVE-2025-68936 affects ONLYOFFICE Docs prior to 9.2.1 (DocumentServer relation) and is referenced across multiple feeds as a cross-site scripting (XSS) vulnerability. Affected software: ONLYOFFICE Docs (DocumentServer component referenced in the CVE). Vulnerability details: XSS via the C...
CVE-2025-68936
ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...
CVE-2025-68917
ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer...
CVE-2025-68917
CVE-2025-68917 affects ONLYOFFICE Docs (DocumentServer) prior to version 9.2.1. The issue is a cross-site scripting (XSS) vulnerability in the textarea of the comment editing form. Root cause details are not elaborated beyond the XSS in the description, but multiple sources confirm the affected p...
CVE-2025-68917
ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer...
EUVD-2006-1628
Malware in sbrugna...
EUVD-2006-1788
Malware in sbrugna...
EUVD-2020-3889
Malware in sbrugna...
EUVD-2006-1785
Malware in sbrugna...
EUVD-2020-3887
Malware in sbrugna...
EUVD-2020-3886
Malware in sbrugna...
EUVD-2020-3888
Malware in sbrugna...