Information Exposure

Overview mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others. Note: This package is not maintained on Packagist anymore, but newer releases exist. Affected versions of this package are vulnerable to Information Exposure in the BlockListPager process...

CVE-2025-6589 With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without 'hideuser' can see the hidden username in the BlockList

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: = 1.42.0...

CVE-2025-6589

Summary (concrete details from provided documents): CVE-2025-6589 affects MediaWiki 1.42.0 and later, tied to the BlockListPager.Php file. An authenticated user with high privileges could exploit this to perform an information exposure (low impact on confidentiality), potentially disclosing suppr...

EUVD-2015-7903

Malware in sbrugna...

EUVD-2025-21047

Malicious code in bioql PyPI...

CVE-2015-8007

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...

Design/Logic Flaw

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...

CVE-2015-8007

Affected software/component: MediaWiki Echo extension. Vulnerability: improper implementation of the hideuser functionality, enabling remote authenticated users to see hidden usernames in certain notifications. Impact (as described): exposure of hidden usernames in “non-revision based” notificati...

CVE-2015-8007

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...