8452 matches found
Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware
Cybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT. Remcos RAT "provides purchases with a wide range of advanced features to remotely control computers belonging to the buyer," Fortinet FortiGuard Lab...
Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows
This article explains the inner workings of the Remcos RAT, a dangerous malware that uses advanced techniques to…...
PT-2024-39135
Name of the Vulnerable Software and Affected Versions: JobSearch WP Job Board plugin for WordPress versions up to, and including, 2.6.7 Description: The issue is related to arbitrary file uploads due to missing file type validation in the jobsearch location load excel file callback function. This...
Microsoft Excel Remote Code Execution Vulnerability (CNVD-2024-42947)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to execute arbitrary code on the system...
Security Updates for Microsoft Excel Products C2R (October 2024)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by the following: - A remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Microsoft Excel 2016 RCE Vulnerability (KB5002643)
This host is missing an important security update according to Microsoft KB5002643 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...
CVE-2024-43504
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-43504
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-43504 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2024-43504 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2024-43504
CVE-2024-43504 – Microsoft Excel RCE : Public sources confirm a remote code execution vulnerability in Microsoft Excel (Office suite). The vulnerability affects Excel components (including Excel 2016 via KB5002643 and newer Office updates) and can be triggered by user interaction when a crafted f...
Description of the security update for Excel 2016: October 8, 2024 (KB5002643)
None None...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Excel 资源管理错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to execute arbitrary code on the system...
Security Updates for Microsoft Excel Products (October 2024)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead...
PT-2024-6768 · Microsoft · 365 Apps For Enterprise +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified...
KLA73908 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Office c...
XML External Entity (XXE) Injection
Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to XML External Entity XXE Injection through the toUtf8 function in the XmlScanner.php file. An attacker can disclose server files...
XXE in PHPSpreadsheet's XLSX reader
Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...