CVE-2025-49578

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578

Citizen is a MediaWiki skin. CVE-2025-49578 describes an XSS where date messages produced by Language::userDate are inserted into raw HTML, enabling stored XSS on wikis where a user has the editinterface right but not the editsitejs right. The issue affects Citizen versions prior to 3.3.1 and is ...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2024-44905

creationtimestamp| type| source ---|---|--- 2025-06-12 16:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18198 2025-06-12 17:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgfozgvfb2e...

CVE-2025-49196

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:18+00:00| seen| Telegram/wgoTb5XaYjt4edW9eGqUUS797b0TcQmpar0c1bJk2kSM 2025-06-13 06:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18264...

CVE-2025-46035

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18175 2025-06-12 17:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgg5g2jhk2s 2025-06-13 05:38:09+00:00| seen|...

CVE-2025-41234

creationtimestamp| type| source ---|---|--- 2025-06-12 13:49:06+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lrg2sogpfc2a 2025-06-12 16:11:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrgcrqkre52f 2025-06-12 21:34:38+00:00| seen|...

CVE-2025-2254

creationtimestamp| type| source ---|---|--- 2025-06-12 10:33:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18158 2025-06-12 11:35:08+00:00| published-proof-of-concept| Telegram/fiao7xA0oH91C7wjAlMQ2SU0Cic3eA9k5t4dM3RPWX96YFU 2025-06-12 11:43:16+00:00| seen|...

CVE-2025-21865

creationtimestamp| type| source ---|---|--- 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05...

CVE-2025-49815

creationtimestamp| type| source ---|---|--- 2025-06-12 05:54:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrfabq3ixz2e...

CVE-2025-49819

creationtimestamp| type| source ---|---|--- 2025-06-12 05:47:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7wepavb2u...

CVE-2025-49820

creationtimestamp| type| source ---|---|--- 2025-06-12 05:40:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7iuhmym2m...

CVE-2025-6009

creationtimestamp| type| source ---|---|--- 2025-06-12 03:34:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18144 2025-06-12 05:48:56+00:00| published-proof-of-concept| Telegram/1Aa4wx5C77-QnNp1HoIjIHD7JstDp4QgHQR99I-iOvE2Mo 2025-06-12 06:22:25+00:00| seen|...

CVE-2025-6007

creationtimestamp| type| source ---|---|--- 2025-06-12 02:33:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18143 2025-06-12 05:48:56+00:00| published-proof-of-concept| Telegram/1Aa4wx5C77-QnNp1HoIjIHD7JstDp4QgHQR99I-iOvE2Mo 2025-06-12 05:58:06+00:00| seen|...

CVE-2014-8141

creationtimestamp| type| source ---|---|--- 2025-06-12 01:31:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18141...

GWE JEvents SQL Injection Vulnerability

GWE JEvents is a plugin from GWE UK for Joomla! A SQL injection vulnerability exists in GWE JEvents versions prior to 3.6.88 and 3.6.82.1, which stems from a SQL injection in the publicly accessible date range query function...

Citizen cross-site scripting vulnerabilities

Citizen is a beautiful, easy-to-use and responsive MediaWiki skin from the Star Citizen Wiki team. A cross-site scripting vulnerability exists in Citizen versions prior to 3.3.1, which stems from the insertion of a date message returned by Language::userDate into raw HTML, which could lead to...

Debian: Security Advisory (DLA-4215-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5941-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...