3480 matches found
CVE-2020-27603-bbb-libreoffice-poc
CVE-2020-27603-bbb-libreoffice-poc Big Blue Button 中 LibreOffice 文件外泄漏洞的概念验证 这些 ODT 文件展示了如何利用服务器端 LibreOffice 渲染（例如 BigBlueButton）中可能发生的文件外泄漏洞。 背景： https://blog.hboeck.de/archives/902-File-Exfiltration-via-Libreoffice-in-BigBlueButton-and-JODConverter.html...
Gotenberg < 8.34.0 - Local File Disclosure
Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...
CVE-2026-63270
A flaw was found in LibreOffice. This vulnerability allows information disclosure when a user opens a specially crafted document. An attacker can construct malicious URLs within document features that expand local environment variables or configuration settings, enabling the exfiltration of...
CVE-2026-63269
A flaw was found in LibreOffice. When processing linked audio or video files on Linux systems, the application uses the GStreamer multimedia framework for playback. By convincing a victim to open a specially crafted document containing a malicious HTTP Live Streaming HLS playlist, an attacker can...
Exploit for CVE-2026-63277
cve-id Donate Help maintain this project...
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is...
CVE-2019-9849
CVE-2019-9849: LibreOfficeの「ステルスモード」におけるリモート箇条書きグラフィックの取得 LibreOfficeには、「ステルスモード」があり、「信頼された」と見なされる場所からのドキュメントのみがリモートリソースを取得できるようになっています。 このモードはデフォルトではありませんが、ドキュメント内にリモートリソースを含めるLibreOfficeの機能を無効にしたいユーザーが有効にすることができます。 バージョン6.2.5以前では、箇条書きグラフィックがこの保護から除外されるという欠陥が存在していました。 HTMLタグ | HTML属性 | 開いたときにトリガ...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : LibreOffice vulnerabilities (USN-8868-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8868-1 advisory. It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause...
[SECURITY] [DSA 6543-1] libreoffice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6543-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2026 https://www.debian.org/security/faq -...
CVE-2026-63268
A flaw was found in LibreOffice Calc. An attacker could craft a spreadsheet document with an external database link that points to local text files. If a user opens the malicious document, the application automatically reads the local file contents into the sheet, leading to unauthorized...
CVE-2018-10583
CVE-2018-10583 当 LibreOffice 6.0.3 和 Apache OpenOffice Writer 4.1.5 自动处理并启动嵌入在恶意文件中的 SMB 连接时，会发生信息泄露漏洞，如 ".odt XML 文档" 中 "office:document-content" 元素内的 "xlink:href=file://192.168.0.2/test.jpg" 所示。 http://bit.ly/2w9mU1n...
CVE-2026-63267
A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...
CVE-2023-36664
CVE-2023-36664 : Ghostscript リモートコード実行 CVE-2023-36664 の概念実証。 使用方法 .eps ファイルにペイロードを挿入するには： python3 poc.py -f "filename" --payload "command" python3 poc.py -f file.eps --payload firefox .eps ファイルにリバースシェルペイロードを挿入するには： python3 poc.py -f "filename" --revshell --ip "ip" --port "port" python3 poc.py -f...
CVE-2026-63277
A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...
CVE-2026-63266
A flaw was found in LibreOffice. When processing a spreadsheet with a cell range linked to an external data source, LibreOffice Calc can load an embedded Firebird database that writes files outside its intended directory. By convincing a user to open a specially crafted document, an attacker coul...
USN-8868-1: LibreOffice vulnerabilities
It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...
DEBIAN-CVE-2026-63277
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...
CVE-2026-63277
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...
DEBIAN-CVE-2026-63267
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...
DEBIAN-CVE-2026-63266
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...