Lucene search
+L

10123 matches found

Vulnrichment
Vulnrichment
•added 2026/03/26 1:24 p.m.•33 views

CVE-2018-25219 PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

8.6CVSS7.1AI score0.00247EPSS
SaveExploits1References4
CVE
CVE
•added 2026/03/26 1:24 p.m.•29 views

CVE-2018-25219

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling (SEH) buffer overflow vulnerability in the registration flow. A crafted payload entered into the Licensed E-mail and Registration Code field can trigger a buffer overflow (including a pop-pop-ret gadget) that enables l...

8.6CVSS7.1AI score0.00247EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/03/26 1:24 p.m.•41 views

CVE-2018-25219 PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

8.6CVSS0.00247EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/26 1:24 p.m.•25 views

CVE-2018-25215 Excel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

6.8CVSS6.1AI score0.00176EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/26 1:24 p.m.•49 views

CVE-2018-25215 Excel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

6.8CVSS0.00176EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/26 1:24 p.m.•28 views

CVE-2018-25215

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow in the E-Mail and Registrations Code field. A crafted payload of about 5000 bytes pasted into the Registration field can crash the application when the Register button is clicked, resulting in a denial of service. The C...

6.8CVSS6.1AI score0.00176EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2026/03/26 1:24 p.m.•8 views

CVE-2018-25215

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

6.8CVSS6AI score0.00176EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•21 views

PT-2026-28256

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

8.6CVSS6.8AI score0.00247EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•6 views

CVE-2018-25215: Out-of-bounds Write

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

6.8CVSS6.1AI score0.00176EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•20 views

PT-2026-28252

Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data...

6.8CVSS6.1AI score0.00176EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•6 views

CVE-2018-25219: Out-of-bounds Write

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

8.6CVSS7.1AI score0.00247EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/26 12:00 a.m.•27 views

PassFab Excel Password Recovery has a buffer error vulnerability

PassFab Excel Password Recovery is a Excel file password recovery tool developed by the PassFab company. The version 8.3.1 of PassFab Excel Password Recovery contains a buffer error vulnerability. This vulnerability stems from improper handling of structured exceptions, leading to a buffer...

8.6CVSS7.1AI score0.00247EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/03/26 12:00 a.m.•19 views

PassFab Excel Password Recovery has a buffer error vulnerability

PassFab Excel Password Recovery is a Excel file password recovery tool developed by PassFab Corporation. The version Excel Password Recovery Professional 8.2.0.0 contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the E-Mail and Registrations Code field, whic...

6.8CVSS6.2AI score0.00176EPSS
SaveExploits1References3
NVD
NVD
•added 2026/03/20 5:16 a.m.•25 views

CVE-2026-32950

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.8CVSS0.01048EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/03/20 4:14 a.m.•14 views

CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS6.2AI score0.01048EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/20 4:14 a.m.•42 views

CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS0.01048EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/03/20 4:14 a.m.•18 views

CVE-2026-32950 SQLBot: RCE via SQL Injection in Excel Upload Endpoint

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS6.3AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/03/20 4:14 a.m.•22 views

EUVD-2026-13543

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS6.2AI score0.01048EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/20 4:14 a.m.•46 views

CVE-2026-32950

CVE-2026-32950 affects SQLBot prior to 1.7.0, where an authenticated user can trigger a critical SQL Injection in the /api/v1/datasource/uploadExcel endpoint. The root cause is unsanitized Excel sheet names concatenated into PostgreSQL table names and embedded into COPY statements via f-strings i...

8.8CVSS6.2AI score0.01048EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2026/03/20 4:14 a.m.•13 views

CVE-2026-32950

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a critical SQL Injection vulnerability in the /api/v1/datasource/uploadExcel endpoint that enables Remote Code Execution RCE, allowing any authenticated user even the...

8.6CVSS6.2AI score0.01048EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder