610 matches found
CVE-2022-23656
Zulip is an open source team chat app. The main development branch of Zulip Server from June 2021 and later is vulnerable to a cross-site scripting vulnerability on the recent topics page. An attacker could maliciously craft a full name for their account and send messages to a topic with several...
CVE-2022-31168
Zulip is an open source team chat tool. Due to an incorrect authorization check in Zulip Server 5.4 and earlier, a member of an organization could craft an API call that grants organization administrator privileges to one of their bots. The vulnerability is fixed in Zulip Server 5.5. Members who...
CVE-2022-31134
Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessible only to server owners and server administrators, which provides a way to download a "public data" export. While this export is only accessible to administrators, in many...
CVE-2019-16216
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack...
EUVD-2021-17400
Malware in sbrugna...
EUVD-2019-7028
Malware in sbrugna...
EUVD-2020-4938
Malware in sbrugna...
EUVD-2021-17409
Malware in sbrugna...
EUVD-2018-21579
Malware in sbrugna...
EUVD-2018-21578
Malware in sbrugna...
EUVD-2018-21582
Malware in sbrugna...
EUVD-2018-21591
Malware in sbrugna...
EUVD-2020-30264
Malware in sbrugna...
EUVD-2021-27172
Malware in sbrugna...
EUVD-2016-5426
Malware in sbrugna...
EUVD-2020-30265
Malware in sbrugna...
EUVD-2019-8606
Malware in sbrugna...
EUVD-2020-3264
Malware in sbrugna...