8473 matches found
Design/Logic Flaw
An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses an Excel macro for a username, it will not be properly sanitized when exported to a CSV file. This can result in remote...
CVE-2018-20752
An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses an Excel macro for a username, it will not be properly sanitized when exported to a CSV file. This can result in remote...
CVE-2018-20752
Recon-ng (before 4.9.5) contains a CSV injection vulnerability in modules/reporting/csv.py due to insufficient validation. When exporting a Twitter username with an Excel macro to CSV, sanitization fails, potentially enabling remote code execution for the attacker. No exploitation details are pro...
PassFab Excel Password Recovery 8.3.1 - SEH Local Exploit
Exploit Title: PassFab Excel Password Recovery SEH Local Exploit Date: 31.01.19 Vendor Homepage:https://www.passfab.com/products/excel-password-recovery.html Software Link: https://www.passfab.com/downloads/passfab-excel-password-recovery.exe Exploit Author: Achilles Tested Version: 8.3.1 Tested...
PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow
Exploit Title: PassFab Excel Password Recovery SEH Local Exploit Date: 31.01.19 Vendor Homepage:https://www.passfab.com/products/excel-password-recovery.html Software Link: https://www.passfab.com/downloads/passfab-excel-password-recovery.exe Exploit Author: Achilles Tested Version: 8.3.1 Tested...
PassFab Excel Password Recovery 8.3.1 - SEH Local Exploit
PassFab Excel Password Recovery 8.3.1 - SEH Local Exploit Exploit Title: PassFab Excel Password Recovery SEH Local Exploit Date: 31.01.19 Vendor Homepage:https://www.passfab.com/products/excel-password-recovery.html Software Link:...
PassFab Excel Password Recovery 8.3.1 - SEH Local Exploit
Exploit for windows platform in category local exploits Exploit Title: PassFab Excel Password Recovery SEH Local Exploit Vendor Homepage:https://www.passfab.com/products/excel-password-recovery.html Software Link: https://www.passfab.com/downloads/passfab-excel-password-recovery.exe Exploit Autho...
PhpSpreadsheet 1.5.0 XXE vulnerability reproduction and analysis-vulnerability warning-the black bar safety net
0x01 introduction PhpSpreadsheet is a very popular pure PHP class library that allows you to easily read and write Excel, LibreOffic Calc and other spreadsheet file formats, is PHPExcel alternative. 2018 11 October 13, PhpSpreadsheet was broke presence of the XXE vulnerability, CVE-2018-19277, in...
RogueRobin Malware Uses Google Drive as C2 Channel
A custom malware used by the APT known as DarkHydrus uses a mix of novel techniques, including using Google Drive as an alternate command-and-control C2 channel. According to Palo Alto’s Unit 42 intelligence division, the targeted attack involved spear-phishing emails written in Arabic sent to...
New malware found using Google Drive as its command-and-control server
Since most security tools also keep an eye on the network traffic to detect malicious IP addresses, attackers are increasingly adopting infrastructure of legitimate services in their attacks to hide their malicious activities. Cybersecurity researchers have now spotted a new malware attack campai...
The vulnerability of Microsoft Excel’s spreadsheet editor lies in errors related to object processing mechanisms in memory, which allow attackers to execute arbitrary code with privileges of the current user.
The vulnerability of Microsoft Excel editors is related to errors in the memory handling of objects. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current user, using specially crafted content...
The vulnerability of Excel spreadsheet editors, related to errors in memory object processing, allows attackers to gain access to protected information.
The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...
The vulnerability affects the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office applications and Office 365, the Microsoft Office Compatibility Pack, the Microsoft Windows operating system, the Microsoft PowerPoint Viewer for presentation viewing, and the Microsoft Office Word Viewer for document reading. This allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a spreadsheet software; Microsoft Office and Office 365 applications; the Microsoft Office Compatibility Pack; the Microsoft Windows operating system; the Microsoft PowerPoint Viewer, a presentation software; and...
Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2596760)
This host is missing an important security update according to Microsoft KB2596760 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer,...
Description of the security update for Office 2010: January 8, 2019
Description of the security update for Office 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Excel Viewer 2007: January 8, 2019
Description of the security update for Excel Viewer 2007: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...
KLA11396 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
Microsoft Internet Explorer CVE-2019-0541 Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Faile...
The vulnerability of Microsoft Excel’s spreadsheet editor arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in the context of the current user.
The vulnerability of Microsoft Excel spreadsheet editors arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created file...