EUVD-2026-101288

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscriptions. A guest can trigger the issue by registering an event queue with parameters that request messages from an unsubscribe...

CVE-2026-100404 Zulip: Guests can read new messages in non-subscribed public channels

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscriptions. A guest can trigger the issue by registering an event queue with parameters that request messages from an unsubscribe...

CVE-2026-100404

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscriptions. A guest can trigger the issue by registering an event queue with parameters that request messages from an unsubscribe...

CVE-2026-102893

In Zulip Server versions through 12.1 , a vulnerability exists in the GenericOpenIdConnectBackend component. The system fails to reject an explicitly false email_verified claim when matching an identity provider's email claim to an active account's delivery_email . This allows an attacker to log ...

CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's deliveryemail without rejecting an explicitly false emailverified claim. If a configured identity provider returns a...

CVE-2026-102893

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's deliveryemail without rejecting an explicitly false emailverified claim. If a configured identity provider returns a...

EUVD-2026-101287

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's deliveryemail without rejecting an explicitly false emailverified claim. If a configured identity provider returns a...

CVE-2026-102893 Zulip: OpenID Connect authentication ignores the email_verified claim

Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's deliveryemail without rejecting an explicitly false emailverified claim. If a configured identity provider returns a...

CVE-2026-49206

The rapidcsv C++ CSV parser library is vulnerable to an integer overflow in the RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames functions. The root cause is the conversion of size_t indexes to int before being added to std::vector iterators. On 64-bit systems, dimensions exce...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-49206

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

EUVD-2026-101286

rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted sizet indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above...

uncle-spufus

█░░█ █▀▀▄ █▀▀ █░░ █▀▀ █▀▀ █▀▀█ █░░█ █▀▀ █░░█ █▀▀ v1.6" █░░█ █░░█ █░░ █░░ █▀▀ ▀▀█ █░░█ █░░█ █▀▀ █░░█ ▀▀█" ░▀▀▀ ▀░░▀ ▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀ █▀▀▀ ░▀▀▀ ▀░░ ░▀▀▀ ▀▀▀" Uncle Spufus v1.6 A tool that automates MAC address and hostname spoofing What is Uncle Spufus My long story I remember back in the days when ...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

EUVD-2026-101285

YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...

CVE-2026-62858

The YOURLS URL shortener (prior to version 1.10.5 ) is vulnerable to an unauthenticated file inclusion flaw. The yourls_get_request() function extracts the request path without proper sanitization, allowing dot and slash traversal sequences to bypass yourls_sanitize_url() and yourls_esc_url(). Th...

CVE-2026-62858

YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...

CVE-2026-62858 YOURLS: Unauthenticated File Inclusion

YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...

CVE-2026-62858 YOURLS: Unauthenticated File Inclusion

YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...