CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

CVE-2025-62656 GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

PT-2025-42816

Name of the Vulnerable Software and Affected Versions MediaWiki GlobalBlocking extension versions 1.43 and 1.44 Description The MediaWiki GlobalBlocking extension contains a flaw related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS...

EUVD-2020-2987

Malware in sbrugna...

EUVD-2012-4323

Malware in sbrugna...

EUVD-2025-3105

Malicious code in bioql PyPI...

CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2024-23179

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks...

CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2025-23073

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2025-23073 API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

CVE-2025-23073

The Wikimedia Foundation MediaWiki GlobalBlocking Extension is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. This flaw allows an unauthorized actor to retrieve embedded sensitive data . Specifically, the list=globalblocks API can reveal the IP of an au...

Mediawiki GlobalBlocking Extension 信息泄露漏洞

Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. An information disclosure vulnerability exists in Mediawiki GlobalBlocking Extension, which arises from the exposure of sensitive information and allows unauthorized visitors to access embedded sensitive data...

CVE-2025-23073: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension...

PT-2025-4806

Name of the Vulnerable Software and Affected Versions MediaWiki GlobalBlocking Extension affected versions not specified Description The issue concerns an Exposure of Sensitive Information to an Unauthorized Actor, allowing the retrieval of embedded sensitive data. It briefly impacted the master...

The vulnerability of the GlobalBlocking extension of the software platform for implementing the hypertext environment of MediaWiki allows a violator to carry out cross-site scripting attacks.

The vulnerability of the GlobalBlocking extension of the MediaWiki software, which is used to implement a hypertext environment, relates to improper input validation during the creation of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attac...

CVE-2024-23179

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks...

MediaWiki Security Breach

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.40.2, which stems from a cross-site...

PT-2024-2681

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.40.2 GlobalBlocking extension versions prior to 1.40.2 Description The issue is related to the GlobalBlocking extension in MediaWiki, where improper input neutralization during web page creation can lead to securi...

MediaWiki Elevation of Privilege Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki 1.34.0 and earlier versions with...