CVE-2025-62669 UserInfoCard: activeLocalBlocksAllWikis does not do permissions checks

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39...

CVE-2025-62669: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39...

PT-2025-42684

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation Mediawiki - CentralAuth Extension versions prior to 1.39 Description A resource leak exposure exists in the Wikimedia Foundation Mediawiki - CentralAuth Extension. This allows for the potential exposure of sensitive...

EUVD-2021-22760

Malware in sbrugna...

EUVD-2021-22759

Malware in sbrugna...

EUVD-2022-32659

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-6926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki -...

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

UBUNTU-CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-6926: Improper Authentication

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

PT-2025-27814

Name of the Vulnerable Software and Affected Versions: Mediawiki - CentralAuth Extension versions 1.39.0 through 1.39.12 Mediawiki - CentralAuth Extension versions 1.42.0 through 1.42.6 Mediawiki - CentralAuth Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improp...

Code injection

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future...

PT-2020-13016

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions through REL1 34 Description The issue allows remote attackers to obtain sensitive hidden account information. This can be done via the "api.php?action=query&meta=globaluserinfo&guiuser=" request, which ...

PT-2014-2308

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions prior to 1.18.6 MediaWiki CentralAuth extension versions 1.19.x prior to 1.19.3 MediaWiki CentralAuth extension versions 1.20.x prior to 1.20.1 Description The issue allows remote attackers to hijack we...

PT-2020-7550

Name of the Vulnerable Software and Affected Versions: MediaWiki CentralAuth extension versions prior to 1.19.10 MediaWiki CentralAuth extension versions 1.2x prior to 1.21.4 MediaWiki CentralAuth extension versions 1.22.x prior to 1.22.1 Description: The issue allows remote attackers to obtain...

PT-2014-2771

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions 1.19.x through 1.19.7 MediaWiki CentralAuth extension versions 1.20.x through 1.20.6 MediaWiki CentralAuth extension versions 1.21.x through 1.21.1 Description The issue allows remote attackers to bypas...

PT-2013-1794

Name of the Vulnerable Software and Affected Versions MediaWiki CentralAuth extension versions prior to 1.19.9 MediaWiki CentralAuth extension versions 1.20.x prior to 1.20.8 MediaWiki CentralAuth extension versions 1.21.x prior to 1.21.3 Description A cross-site request forgery CSRF issue allows...