CVE-2019-18987

An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has accidentally or otherwise been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition...

EUVD-2021-17091

Malware in sbrugna...

EUVD-2017-0715

Malware in sbrugna...

EUVD-2013-4198

Malware in sbrugna...

EUVD-2020-18501

Malware in sbrugna...

EUVD-2020-4367

Malware in sbrugna...

EUVD-2021-18445

Malware in sbrugna...

EUVD-2021-22764

Malware in sbrugna...

EUVD-2021-17090

Malware in sbrugna...

EUVD-2023-41175

Malicious code in bioql PyPI...

EUVD-2022-44936

Malicious code in bioql PyPI...

EUVD-2021-32237

Malicious code in bioql PyPI...

EUVD-2021-32848

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-41767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned...

CVE-2022-28206

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights...

CVE-2020-9382

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget as defined by this extension via MediaWiki's widget: parser function...

GHSA-5VJ8-G3QG-4QH6 X-Forwarded-For header allows brute-forcing autoblocked IP addresses

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value...

GHSA-XPV7-93CM-4MXV img_auth.php may leak private extension images into the public cache

In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the imgauth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because...

CVE-2020-25815

An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped instead of text...