Lucene search
+L

8479 matches found

The Hacker News
The Hacker News
added 2024/01/29 11:03 a.m.30 views

Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and Golang

Cybersecurity researchers have detected in the wild yet another variant of the Phobos ransomware family known as Faust. Fortinet FortiGuard Labs, which detailed the latest iteration of the ransomware, said it's being propagated by means of an infection that delivers a Microsoft Excel document .XL...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2024/01/29 12:00 a.m.15 views

Product Inventory with Export to Excel Security Vulnerability

Product Inventory with Export to Excel is a product inventory application with export to Excel functionality by rems Personal Developer. A security vulnerability exists in Product Inventory with Export to Excel version 1.0, which stems from the Add Product feature being susceptible to cross-site...

6.1CVSS5.9AI score0.00665EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2024/01/29 12:00 a.m.14 views

CVE-2024-24135

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks...

6.3AI score0.00665EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2024/01/29 12:00 a.m.13 views

PT-2024-20288 · Sourcecodester · Sourcecodester Product Inventory With Export To Excel

Name of the Vulnerable Software and Affected Versions: Sourcecodester Product Inventory with Export to Excel version 1.0 Description: The issue concerns cross-site scripting XSS attacks. Specifically, the Product Name and Product Code in the 'Add Product' section are vulnerable to such attacks...

6.1CVSS6AI score0.00665EPSS
SaveExploits3References4
Cvelist
Cvelist
added 2024/01/29 12:00 a.m.42 views

CVE-2024-24135

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks...

6.3AI score0.00665EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
added 2024/01/23 12:00 a.m.43 views

Amazon Linux AMI : perl-Spreadsheet-ParseExcel (ALAS-2024-1905)

The version of perl-Spreadsheet-ParseExcel installed on the remote host is prior to 0.5900-5.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1905 advisory. Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel i...

7.8CVSS8.6AI score0.19106EPSS
SaveExploits2References4
Amazon
Amazon
added 2024/01/22 12:00 a.m.12 views

Important: perl-Spreadsheet-ParseExcel

Issue Overview: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type "eval". Specifically, the issue stems from the...

7.8CVSS7.6AI score0.19106EPSS
SaveExploits2
Amazon
Amazon
added 2024/01/22 12:00 a.m.10 views

Important: perl-Spreadsheet-ParseExcel

Issue Overview: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type "eval". Specifically, the issue stems from the...

7.8CVSS7.8AI score0.19106EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.18 views

Fedora: Security Advisory for perl-Spreadsheet-ParseExcel (FEDORA-2023-84d3cc47b1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.19106EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.24 views

Fedora: Security Advisory (FEDORA-2023-921f6975c2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.19106EPSS
SaveExploits2References6
GithubExploit
GithubExploit
added 2024/01/12 10:49 p.m.60 views

Exploit for Cross-site Scripting in Remyandrade Product_Inventory_With_Export_To_Excel

CVE-2024-24135: Product Inventory with Export to Ex...

6.1CVSS7.1AI score0.00665EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/01/12 12:00 a.m.447 views

Security Updates for Microsoft Office Products C2R RCE (January 2024)

A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have acces...

7.8CVSS8.6AI score0.03287EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/01/12 12:00 a.m.74 views

Microsoft Office Code Execution Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has a code execution vulnerability that can be exploited by an attacker to execute arbitra...

7.8CVSS7.9AI score0.03287EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:00 a.m.20 views

The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files lies in its inability to eliminate instructions in dynamically executed code, allowing attackers to execute arbitrary code.

The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files is related to the lack of measures taken to eliminate instructions in the dynamically executed code. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.19106EPSS
SaveExploits2References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:00 a.m.17 views

The vulnerability of the Spreadsheet::ParseExcel library in email security gateways of the Barracuda Email Security Gateway Appliance, related to the use of dangerous methods or functions, allows attackers to execute arbitrary code.

The vulnerability of the Spreadsheet::ParseExcel library, a microprogramming solution for email security gateways like Barracuda Email Security Gateway Appliance, is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow an attacker to execute arbitrary co...

10CVSS7.9AI score0.44575EPSS
SaveExploits2References9Affected Software2
Microsoft KB
Microsoft KB
added 2024/01/09 8:00 a.m.236 views

January 9, 2024—KB5034129 (OS Build 20348.2227)

None None...

8.8CVSS6.8AI score0.22773EPSS
SaveExploits9
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.24 views

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has a code execution vulnerability that can be exploited by an attacker to execute arbitra...

7.8CVSS8AI score0.03287EPSS
SaveExploits0References3
Fedora
Fedora
added 2024/01/08 1:34 a.m.32 views

[SECURITY] Fedora 38 Update: perl-Spreadsheet-ParseExcel-0.6600-1.fc38

The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file...

7.8CVSS7.5AI score0.19106EPSS
SaveExploits2
Fedora
Fedora
added 2024/01/08 1:24 a.m.34 views

[SECURITY] Fedora 39 Update: perl-Spreadsheet-ParseExcel-0.6600-1.fc39

The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file...

7.8CVSS7.5AI score0.19106EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2024/01/07 12:00 a.m.34 views

Fedora 39 : perl-Spreadsheet-ParseExcel (2023-921f6975c2)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-921f6975c2 advisory. Fix for CVE-2023-7101 unvalidated input can lead to arbitrary code execution vulnerability. Tenable has extracted the preceding description block...

7.8CVSS8.7AI score0.19106EPSS
SaveExploits2References2
Rows per page
Query Builder