Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:34:33 +0000 EUVD-2026-321148 https://cve.radiocsirt.org/vuln/euvd-2026-321148 EUVD-2026-321148 https://cve.radiocsirt.org/vuln/euvd-2026-321148 fkie_cve-2023-54348 https://cve.radiocsirt.org/vuln/fkie_cve-2023-54348 <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spreadsheet application. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the workstation of users who open the exported CSV in a spreadsheet application. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-54348 GHSA-h3v8-v9f6-ffjp https://cve.radiocsirt.org/vuln/ghsa-h3v8-v9f6-ffjp <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula payloads into vendor name fields. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> <p>ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula payloads into vendor name fields. Attackers can add malicious formulas like =10+20+cmd|&#39; /C calc&#39;!A0 in the vendor creation form, which execute when the exported CSV file is opened in spreadsheet applications.</p> https://cve.radiocsirt.org/vuln/ghsa-h3v8-v9f6-ffjp