CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML 写入器 XSS PoC 概述 这是针对 CVE-2025-22131 的 PoC，该漏洞是 PhpSpreadsheet 2.2.2、2.1.2 和 1.29.4 之前版本中的一个跨站脚本 XSS 漏洞。漏洞存在于 generateNavigation 函数中，该函数在 XLSX 到 HTML 转换过程中未能对工作表名称进行清理，从而允许注入恶意 JavaScript。 CVE ID: CVE-2024-47875 GitHub Advisory: GHSA-79xx-vf93-p7cx Affected...

cve_manager

项目描述 一个包含Python应用和Shell脚本的集合，用于每天定时将NIST CVE数据库中的新漏洞及其相关产品导出为xlsx电子表格并通过邮件发送。该电子表格可手动解读，以评估对特定组织的风险。 基于GitHub上Antonios Atlasis的原始开源产品 在本地同步NIST的CVE和CPE数据库，并提供基本查询功能 从数据生成xlsx报告，并通过邮件发送这些报告 文件：cvemanager.py 一个Python脚本，原作者Antonios Atlasis - [email protected]...

PyADRecon

Implementación en Python3 de un ADRecon mejorado para Pentesters y Blue Teams. ADRecon es una herramienta que recopila información sobre MS Active Directory y genera un informe XSLX para proporcionar una imagen holística del estado actual del entorno AD objetivo. !TIP Si eres un Red Team, puede q...

CVE-2025-22131-PoC

CVE-2025-22131-PoC CVE-2025-22131 的 PoC（概念验证） PhpSpreadsheet 是一个用纯 PHP 编写的库，提供了一组类，允许您读取和写入各种电子表格文件格式，如 Excel 和 LibreOffice Calc。 phpspreadsheet 版本 =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets = $this-spreadsheet-getAllSheets; else $sheets = $this-spreadsheet-getSheet$this-sheetIndex; //...

CVE-2026-53964

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...

CVE-2026-53964 Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...

CVE-2026-53964

The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...

CVE-2026-53964 Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...

caos-os

CAOS — Customer Assurance Operating System Responde una sola vez a los cuestionarios de seguridad que te envían tus clientes. Toda empresa que maneja datos de clientes recibe las mismas solicitudes una y otra vez: cuestionarios de seguridad, evaluaciones de privacidad, revisiones de riesgo de...

Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation

Streaming GetRows row-bound bypass causes attacker-controlled allocation Summary Excelize's prior row-bound fix for GHSA-h69g / CVE-2026-54063 protects the checked worksheet parser, but the streaming worksheet reader used by Rows and GetRows does not enforce the same TotalRows bound on the row r...

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Negative shared-string index causes panic in GetCellValue and GetRows Summary Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with -1, the parsed index is negative. T...

SUSE CVE-2026-53474

A flaw was found in migration-planner. A remote authenticated attacker could exploit this vulnerability by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malicious SQL embedded within a spreadsheet cell is executed when cluster names are processed. This SQL...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-81728

Dolibarr before 24.0.0 is affected by a SQL injection in its CSV/XLSX import wizard. The updatekeys parameter in htdocs/imports/import.php is filtered only by alphanohtml, which strips HTML but leaves SQL metacharacters intact. In import_insert() (import_csv.modules.php), submitted values are con...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-78206

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

EUVD-2026-64681

exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...

CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service...