4984 matches found
Microsoft Excel Information Disclosure (CVE-2019-1112)
...
Microsoft Excel CVE-2019-1110 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
PT-2019-2685
Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description A remote code execution issue exists due to the software's failure to properly handle objects in memory. This could allow a remote attacker to execute arbitrary code in the context of...
Power Query Editor Redirect Malicious Code
The vulnerability of the Power Query editor for Microsoft Excel relates to insufficient neutralization of special elements transmitted in URIs. Exploiting this vulnerability allows a malicious actor to redirect users to malicious URIs and execute malicious code using a specially crafted document...
Microsoft Excel Power Query Remote Code Execution
A remote code execution vulnerability exists in Microsoft Excel Power Query. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
New Microsoft Excel Attack Vector Surfaces
UPDATE A feature in Microsoft Office’s Excel spreadsheet program called Power Query can be exploited to plant malware on remote systems. Researchers at Mimecast Threat Center say they have developed a proof-of-concept attack scenario and reported the vulnerability Thursday. The exploitable featur...
Exclusive: German Police Raid OmniRAT Developer and Seize Digital Assets
The German police yesterday raided the house of the developer of OmniRAT and seized his laptop, computer and mobile phones probably as part of an investigation into a recent cyber attack, a source told The Hacker News. OmniRAT made headlines in November 2015 when its developer launched it as a...
How Hackers Turn Microsoft Excel's Own Features Against It
A pair of recent findings show how hackers can compromise Excel users without any fancy exploits...
PT-2019-2571
Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to the Power Query editor in Microsoft Excel, where there is insufficient neutralization of special elements passed in a URI. This could allow a remote attacker t...
Security Update for Microsoft Office (June 2019) (macOS)
The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by remote code execution vulnerabilities in the Microsoft Word software due to improper handling of objects in memory. An unauthenticated, remote attacker can...
CVE-2018-7201
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
CVE-2018-7201
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
Input validation
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
CVE-2018-7201
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
CVE-2018-7201
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
PT-2019-11091
Name of the Vulnerable Software and Affected Versions: ProjectSend versions prior to r1053 Description: A CSV Injection issue was discovered, affecting users who import data into Microsoft Excel. Recommendations: For versions prior to r1053, update to version r1053 or later to resolve the issue...
ProjectSend CVS Injection Vulnerability
rojectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A CVS injection vulnerability exists in versions prior to ProjectSend r1053 that affects victims who import data into Microsoft Excel...
CVE-2018-7201: Improper Neutralization of Formula Elements in a CSV File
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
