Rubrics-as-an-Attack-Surface

Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges 📊 Dataset • 🤖 Trained Models • 📝 Paper • 💻 Repo This repository contains code for the paper Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges by Ruomeng Ding, Yifei Pang, He Sun, Yizhong Wang, Steven Wu, and...

audit

audit Audit Preference Pane and Log Reader for OS X OS X has a built in auditing system build into OS X based on OpenBSM. It is configured and setup via the command line, and has some esoteric syntax. To deal with this, I created a system preference pane to configure the options, and a log reader...

CVE-2026-102985

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

CVE-2026-102985

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

CVE-2026-102985 Plane: Any project member can modify (deactivate) other members' records

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

CVE-2026-102985 Plane: Any project member can modify (deactivate) other members' records

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

EUVD-2026-101616

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

CVE-2026-102985

The open-source project management tool Plane versions 1.3.1 and earlier is vulnerable to missing object-level authorization checks. Specifically, the ProjectMemberViewSet.partial_update function places authorization checks only within the role update branch, allowing a guest or member to modify ...

CVE-2026-102985 Plane: Any project member can modify (deactivate) other members' records

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

PT-2026-113950

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description Missing object-level authorization checks allow for membership disruption and cross-member preference tampering. In the ProjectMemberViewSet.partial update function, authorization checks are incorrectl...

CVE-2026-102985: Missing Authorization

Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partialupdate places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's isactive field, including deactivating a project...

BIT-RABBITMQ-2026-67234 RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

CVE-2026-67234 RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

EUVD-2026-77943

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Privacy preferences...

CVE-2026-14989

WPLP Cookie Consent (Cookie Banner for GDPR / CCPA) WordPress plugin versions up to and including 4.4.1 are affected by an Unauthenticated Stored Cross-Site Scripting vulnerability in the wpl_user_preference parameter of the consent-logging AJAX endpoint. The root cause is insufficient input sani...

CVE-2026-81741

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...

CVE-2026-81741 Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...

CVE-2026-81741

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin, in versions prior to 4.7.2 , is vulnerable to an Open Redirect flaw. The issue exists because the plugin does not restrict the redirect target of its email preference confirmation flow to the site's own host. This allow...

CVE-2026-81741: URL Redirection to Untrusted Site

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...

PT-2026-88866

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...