CVE-2026-107218

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where...

CVE-2026-107218

The Excelize Go language library (versions 2.10.1 to 2.11.0 ) is vulnerable to a denial-of-service condition where an attacker can trigger a panic during formula evaluation. The root cause is an improper validation of array index (CWE-129) within the RIGHT() function. Specifically, the library va...

EUVD-2026-94548

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where...

CVE-2026-107218 Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

cve-2024-43425

CVE-2024-43425 펌웨어 정보: 애플리케이션 이름: Moodle 빌드 버전: moodle-4.4.1 영향을 받는 버전: 4.44.4.1, 4.3 4.3.5, 4.24.2.8, 4.1 4.1.11 및 이전의 지원되지 않는 버전 다운로드 링크: moodle-4.4.1 설명 및 영향 질문을 생성하거나 수정할 수 있는 권한을 가진 공격자는 계산된 질문에 대한 악성 입력을 생성할 수 있으며, 이를 악용하여 기본 시스템에서 임의의 명령을 실행할 수 있습니다. 근본 원인 qtypecalculatedfindformulaerrors...

CVE-2024-53924

CVE-2024-53924 설명: Pycel 1.0b30 버전까지는 신뢰할 수 없는 스프레드시트를 처리할 때, =IFA1=200, eval"import'os'.system 하위 문자열로 시작하는 셀의 조작된 수식을 통해 코드 실행이 가능합니다. 작성자: Adham Elmosalamy @aelmo 공개 날짜: 2024년 11월 23일 링크: https://nvd.nist.gov/vuln/detail/CVE-2024-53924 요약 Excel 워크시트 작업 및 Excel 수식의 기호적 안전 평가를 위한 Python 라이브러리인...

CVE-2023-36250

CVE-2023-36250 Уязвимость CSV Injection в GNOME time tracker версии 3.0.2, позволяющая локальным злоумышленникам выполнить произвольный код с помощью специально созданного .tsv файла при создании новой записи. Тип уязвимости CSV Injection Обнаружил Bruno Teixeira Ссылка http://gnome.com Затронуты...

CVE-2024-29375

CSV-Injection-PoC CSV-инъекция в Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Показатель влияния: 5.3, Показатель эксплуатации: 1.3 Затронутые компоненты: параметры Project Description, Identifiers, Custom Triangle Name внутри Input Triangles и Yield Curve Name Скриншо...

salt-shellshock

shellshock обновление bash Этот рецепт пытается обновить bash из системного пакета, и в случае отсутствия обновления компилирует bash на системах, где нет доступного обновления. Работает для нас на старых ubuntu/debian. Скрипт установки bash из:...

hdwebmobile-formula-pricing

HDWebmobile Formula Pricing 고객이 입력한 숫자를 기반으로 수식을 사용해 제품 가격을 산정합니다. PHP의 eval을 사용하지 않고 안전하게 평가됩니다. WordPress.org: https://wordpress.org/plugins/hdwebmobile-formula-pricing/ 요구 사항: WordPress 6.9+, WooCommerce, PHP 7.4+ 라이선스: GPLv2 이상 설명 HDWebmobile Formula Pricing을 사용하면 고객이 제품 페이지에서 치수나 수량을 입력할 수...

CVE-2021-46363

CVE-2021-46363: Внедрение формул в Magnolia CMS Проблема в функции экспорта Magnolia v6.2.3 и ниже позволяет злоумышленникам выполнять атаки внедрения формул через специально созданные CSV/XLS-файлы. Эти формулы могут привести к выполнению произвольного кода на компьютере жертвы при открытии...

CVE-2026-19501-poc

CVE-2026-19501 Poc Description: Sureforms is vulnerabale to a unauthenticated CSV injection vulnerability when attacker can inject a CSV formula when submit a form. This formula will be excuted when admin export CSV file and open it. Step to reproduce: Step 1 : Submit a form and then intercept th...

CVE-2022-44830

Рекомендуемое описание В Sourcecodester Event Registration App v1.0 обнаружено несколько уязвимостей внедрения CSV в полях First Name, Contact и Remarks. Эти уязвимости позволяют злоумышленникам выполнять произвольный код с помощью специально сформированного Excel-файла. Дополнительная информация...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: Instant Developer Foundation 25.0.9600의 CSV 인젝션 – 개념 증명PoC 📌 개요 이 저장소에는 Instant Developer Foundation 프레임워크 25.0.9600 이전 버전로 빌드된 애플리케이션에 영향을 미치는 CSV 인젝션 Formula Injection 취약점CVE-2025-60852에 대한 개념 증명PoC이 포함되어 있습니다. 취약한 프레임워크로 빌드된 애플리케이션은 CSV 형식으로 데이터를 내보낼 때 사용자 입력을 제대로 필터링하지 않습니다...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2026_36832)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636832 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding descripti...

Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2026_35839)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202635839 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding descripti...

CVE-2026-100564

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100563

OpenClaw npm package openclaw before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or...

CVE-2026-100564

Versions of OpenClaw before 2026.8.1 are vulnerable to CSV Formula Injection . The root cause is a failure to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with the permissions of the spre...