Lucene search
+L

12 matches found

Packet Storm News
Packet Storm News
•added 2026/09/25 12:00 a.m.•9 views

Crypto-Bound Identity-Verified Capability Tokens for Coordinating Distributed AI Agents: A Proposal

The prospect of fully autonomous transactional agents did not appear on the horizon until the advent of high capability language models. With such models, the operational benefits of adaptive task orchestration and independent but constrained decision making are tantalizing for enterprises and...

5.8AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2023/11/21 3:15 p.m.•35 views

CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS 120...

9.8CVSS7.2AI score0.0064EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2023/11/21 2:28 p.m.•47 views

CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS 120...

9.8CVSS8.9AI score0.0064EPSS
SaveExploits0
CVE
CVE
•added 2023/11/21 2:28 p.m.•99 views

CVE-2023-49060

CVE-2023-49060 affects Firefox for iOS prior to 120. The issue allows an attacker to exfiltrate a security key from Reader Mode by abusing the referrerpolicy attribute, potentially enabling access to internal pages/data. Root cause: misuse of Reader Mode and referrer policy handling leading to da...

9.8CVSS8.7AI score0.0064EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/05/11 8:41 p.m.•24 views

GHSA-MQ3X-QGWX-3RFW Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection

Impact The pimcore application is vulnerable to Formula Injection/CSV Injection via the Firstname, Lastname, Street, Zip & City input fields. These vulnerabilities allow unauthenticated attackers to execute arbitrary code via a crafted excel file. Successful exploitation can lead to impacts such ...

7.8CVSS7.1AI score0.00406EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/05/11 8:41 p.m.•33 views

Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection

Impact The pimcore application is vulnerable to Formula Injection/CSV Injection via the Firstname, Lastname, Street, Zip & City input fields. These vulnerabilities allow unauthenticated attackers to execute arbitrary code via a crafted excel file. Successful exploitation can lead to impacts such ...

7.8CVSS7.9AI score0.00406EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/05/03 12:00 a.m.•37 views

GHSA-F9P3-H6CG-2CJR Improper neutralization of formula elements in yii-helpers

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

7.8CVSS7.9AI score0.02378EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/05/03 12:00 a.m.•33 views

Improper neutralization of formula elements in yii-helpers

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

8CVSS3.6AI score0.02378EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2022/05/01 12:15 p.m.•29 views

CVE-2022-1544

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

8CVSS0.02378EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/01 12:15 p.m.•17 views

Command injection

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

6.8CVSS8AI score0.02378EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/05/01 11:45 a.m.•39 views

CVE-2022-1544 Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpers

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

8CVSS8.2AI score0.02378EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/01 11:45 a.m.•22 views

CVE-2022-1544 Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpers

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained...

8CVSS8.2AI score
SaveExploits0References4
Rows per page
Query Builder