CVE-2025-22131-PoC

CVE-2025-22131-PoC CVE-2025-22131 的 PoC（概念验证） PhpSpreadsheet 是一个用纯 PHP 编写的库，提供了一组类，允许您读取和写入各种电子表格文件格式，如 Excel 和 LibreOffice Calc。 phpspreadsheet 版本 =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets = $this-spreadsheet-getAllSheets; else $sheets = $this-spreadsheet-getSheet$this-sheetIndex; //...

caos-os

CAOS — 客户保障操作系统 一次回答客户发给您的安全问卷。 每家处理客户数据的公司都会反复收到同样的请求：安全问卷、隐私评估、供应商风险审查、采购尽职调查、证据索取。大多数组织靠手工答复——客户发来的电子表格、一文件夹的策略文档、一封邮件线程，以及某人对上次答复内容的记忆。 CAOS 将其转变为一套记录系统。问卷变成结构化、可作答的工作项。已完成的答复和您的合规文档变成一个可搜索、可引用的语料库。下一份问卷从您已经说过的内容开始，每项陈述都可追溯到其来源的文档或先前答复。 它是自托管 的。您的策略、答复和客户的问卷都保留在您自己的基础设施上。 状态：v0。 CAOS...

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Negative shared-string index causes panic in GetCellValue and GetRows Summary Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with -1, the parsed index is negative. T...

CVE-2026-54063

Excelize CVE-2026-54063: The library vulnerable due to checkSheet() using attacker-controlled row attribute to allocate memory for xlsxRow slices without enforcing the Excel row limit. This can cause (A) out-of-memory leading to process kill and (B) runtime panic from out-of-bounds indexing when ...

SUSE CVE-2024-22368

The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells...

WPS-Forms XXE vulnerability in xlsx parsing

WPS-Forms is an office software. WPS Forms suffers from an XXE vulnerability in xlsx parsing. This allows attackers to exploit the vulnerability to cause the disclosure of sensitive user information as well as a DoS Denial of Service on the user's system...