CVE-2025-55730 XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execution for any user who can edit any page. The...

The vulnerability of the LibreOffice office software package lies in its ability to allow the insertion of code or data, enabling a perpetrator to execute arbitrary code.

The vulnerability of the LibreOffice office software package relates to the possibility of introducing code or data into the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by embedding a malicious macro into documents from a remote location...

Vulnerabilities fixed in LibreOffice

The Document Foundation has fixed three vulnerabilities in LibreOffice. An unauthenticated remote malicious person could potentially exploit the vulnerabilities potentially exploit them to execute arbitrary macro code in the user's context, or to gain access to user passwords in the local passwor...