EUVD-2025-19886

Malicious code in bioql PyPI...

CVE-2025-53501

Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before...

PT-2025-27809 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - Scribunto Extension versions 1.39.0 through 1.39.11 Mediawiki - Scribunto Extension versions 1.42.0 through 1.42.6 Mediawiki - Scribunto Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improper...

CVE-2025-53501: Improper Access Control

Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before...

MediaWiki Scribunto Extension Cross-Site Scripting Vulnerability

MediaWiki is a Wiki program. A cross-site scripting vulnerability exists in the MediaWiki Scribunto extension. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via function names...

PT-2015-5989

Name of the Vulnerable Software and Affected Versions MediaWiki Scribunto extension affected versions not specified Description A cross-site scripting XSS issue exists due to improper handling of a function name in a Lua error backtrace, allowing remote attackers to inject arbitrary web script or...

PT-2020-7776

Name of the Vulnerable Software and Affected Versions: MediaWiki Scribunto extension affected versions not specified Description: The issue allows remote attackers to obtain sensitive information, such as the rollback token, by using a crafted module. This is related to the unstripping of special...