CVE-2024-29375

CSV-Injection-PoC Iniezione CSV in Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Punteggio di Impatto: 5.3, Punteggio di Sfruttamento: 1.3 Componenti Affetti: Descrizione del Progetto, Identificatori, Nome del Triangolo Personalizzato all'interno di Triangoli di Input e...

CVE-2022-44830

Descrizione suggerita È stato scoperto che Sourcecodester Event Registration App v1.0 contiene molteplici vulnerabilità di iniezione CSV nei campi First Name, Contact e Remarks. Queste vulnerabilità consentono agli aggressori di eseguire codice arbitrario tramite un file Excel appositamente...

CVE-2023-36250

CVE-2023-36250 Vulnerabilità di iniezione CSV in GNOME time tracker versione 3.0.2, consente a un attaccante locale di eseguire codice arbitrario tramite un file .tsv appositamente creato durante la creazione di un nuovo record. Tipo di Vulnerabilità Iniezione CSV Scopritore Bruno Teixeira...

CVE-2024-53924

CVE-2024-53924 Beschreibung: Pycel bis einschließlich Version 1.0b30 ermöglicht bei der Arbeit mit einer nicht vertrauenswürdigen Tabelle die Codeausführung über eine manipulierte Formel in einer Zelle, wie z.B. eine, die mit dem Teilstring =IFA1=200, eval"import'os'.system beginnt. Autor: Adham...

cve-2024-43425

CVE-2024-43425 Firmware info: Nome dell'applicazione: Moodle Versione build: moodle-4.4.1 Versioni interessate: 4.4 fino a 4.4.1, 4.3 fino a 4.3.5, 4.2 fino a 4.2.8, 4.1 fino a 4.1.11 e versioni precedenti non supportate Link per il download: moodle-4.4.1 Description and Impact Gli aggressori con...

CVE-2021-46363

CVE-2021-46363: Iniezione di Formula in Magnolia CMS Un problema nella funzione Export di Magnolia v6.2.3 e versioni precedenti consente agli attaccanti di eseguire attacchi di Iniezione di Formula tramite file CSV/XLS appositamente modificati. Queste formule possono comportare l'esecuzione di...

salt-shellshock

Aggiornamento bash per shellshock Questa ricetta prova ad aggiornare bash dal pacchetto del sistema operativo, e ricade nella compilazione di bash su sistemi senza aggiornamenti disponibili. Funziona per noi su vecchi ubuntu/debian. Script di installazione di bash da:...

CVE-2026-19501-poc

CVE-2026-19501 Poc Descrizione: Sureforms è vulnerabile a una vulnerabilità di iniezione CSV non autenticata quando un attaccante può iniettare una formula CSV durante l'invio di un modulo. Questa formula verrà eseguita quando l'amministratore esporta il file CSV e lo apre. Passaggi per la...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: CSV-Injection in Instant Developer Foundation 25.0.9600 – Proof of Concept PoC 📌 Übersicht Dieses Repository enthält einen Proof of Concept PoC für eine CSV-Injection Formel-Injection -Sicherheitslücke CVE-2025-60852, die Anwendungen betrifft, die mit dem Instant Developer...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

CVE-2026-78209 exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

EUVD-2026-64684

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

CVE-2026-78209 exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-19501 CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-19501

CVE-2026-19501 is a CSV injection vulnerability in the Brainstorm Force SureForms WordPress plugin (versions ≤ 2.12.1). The CSV export functionality fails to sanitize spreadsheet formula characters in user-controlled form field names, allowing a remote attacker to inject formulas that execute on ...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

EUVD-2026-60962

CSV export functionality in Brainstorm Force SureForms version, = 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

PT-2026-77149

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureForms versions prior to 2.12.2 Description The CSV export functionality fails to neutralize spreadsheet formula characters in user-controlled form field names before generating exports. This allows a remote attacker to...