Invoke-ATTACKAPI

Invoke-ATTACKAPI OBSOLETO RECOMENDAMOS USAR: https://github.com/Cyb3rWard0g/ATTACK-Python-Client Un script de PowerShell para interactuar con el framework MITRE ATT&CK a través de su propia API con el fin de recopilar información sobre técnicas, tácticas, grupos, software y referencias...

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

MediaWiki EasyTimeline - Code Injection RCE

MediaWiki EasyTimeline Timeline extension versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9 contain a code injection vulnerability caused by insufficient neutralization of newlines in TextData text attributes in EasyTimeline.pl / Timeline.php. A crafted block can inject ploticus 'proc getdata' a...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFD Reflected File Download para MediaWiki Un usuario remoto puede crear una URL especialmente diseñada para el sitio objetivo que, al ser cargada por el usuario objetivo, hará que el script 'api.php' descargue un archivo que contiene comandos de shell CVE-2017-8809. El archivo se...

CVE-2025-61638

CVE-2025-61638 node . "https://www.mediawiki.org/w/api.php" corregido Se pueden encontrar más objetivos en https://www.mediawiki.org/wiki/SitesusingMediaWiki. https://phabricator.wikimedia.org/T401099 https://vulners.com/cve/CVE-2025-61638 El ataque XSS requiere editar una entrada, por lo que se...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

CVE-2026-103446

CVE-2026-103446: Anonymous WikiLambda fragment execution Reporter: Marco Paciaroni BomboBombone. The abstractwikirunfragment API did not check the permission required for caller-supplied unsaved fragments. Anonymous requests could therefore send native implementations to the configured WikiLambda...

CVE-2026-102975

CVE-2026-102975: RevisionDelete API unsuppression authorization bypass Reporter: Marco Paciaroni BomboBombone. MediaWiki's action=revisiondelete accepted suppress=no without checking suppressrevision. A caller with viewsuppressed and a type-specific management right could remove the restricted bi...

CVE-2026-102973

CVE-2026-102973: API email authorization hook bypass Reporter: Marco Paciaroni BomboBombone. MediaWiki's action=emailuser API path did not invoke the EmailUserAuthorizeSend hook. When an extension or site policy used that hook to deny a sender, the web form enforced the denial while the API path...

CVE-2026-102971

CVE-2026-102971: hidden revision author ID disclosure Reporter: Marco Paciaroni BomboBombone. MediaWiki's RESTBase-compatible revision response could include the numeric user ID of an author whose name had been hidden. The response still set usertext to null and marked the author as hidden, but t...

mediawiki-CVE-2026-100382

Lab reproduction - CVE-2026-100382 ExternalData OS command injection What this lab is MediaWiki 1.43 official image, SQLite + ExternalData3.6.1 last vulnerable, mounted read-only from ../mediawiki-extensions-ExternalData. Loopback only: published on 127.0.0.1:$HOSTPORT default 8080. Anonymous...

Linux Distros Unpatched Vulnerability : CVE-2026-102966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-102971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-102967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CVE-2026-102796

A flaw was found in the MediaWiki UserPageViewTracker extension. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted input through the filterusers or ignoreusers parameters. This allows the attacker to perform Structured Query Language SQL injection, potentiall...