Lucene search
+L

31 matches found

CVE
CVE
added 2024/05/05 12:0 a.m.75 views

CVE-2024-34506

CVE-2024-34506 affects MediaWiki: includes/specials/SpecialMovePage.php. Versions vulnerable: MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. Description: when a user with move rights opens Special:MovePage for a page with tens of thousands of subpages, the request may ex...

7.5CVSS6.3AI score0.00898EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2024/05/05 12:0 a.m.76 views

CVE-2024-34506

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the...

7.5CVSS6.2AI score0.00898EPSS
SaveExploits1
Debian
Debian
added 2024/04/27 4:55 p.m.65 views

[SECURITY] [DLA 3796-1] mediawiki security update

Debian LTS Advisory DLA-3796-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin April 27, 2024 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u8 CVE ID : CVE-2023-51704 Security vulnerabilities were found in mediawiki, a website engine fo...

6.1CVSS6.4AI score0.00681EPSS
SaveExploits1
FreeBSD
FreeBSD
added 2024/03/15 12:0 a.m.10 views

mediawiki -- multiple vulnerabilities

Mediawiki reports: T355538, CVE-2024-PENDING SECURITY: XSS in edit summary parser. T357760, CVE-2024-PENDING SECURITY: Denial of service vector via GET request to Special:MovePage on pages with thousands of subpages...

6.5AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/05/24 5:16 p.m.18 views

Subrion CMS PHP Object Injection

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

6.5CVSS7.2AI score0.00864EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2020/04/30 4:4 a.m.25 views

PHP Object Injection

intelliants/subrion is vulnerable to PHP object injection. The vulnerability exists through the serialized data in the subpages value within admin/blocks.php to block/edit...

6.5CVSS2.9AI score0.00864EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/04/29 9:15 p.m.15 views

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

6.5CVSS7.2AI score
SaveExploits0References1
Atlassian
Atlassian
added 2014/07/01 3:29 p.m.66 views

Subpages don't inherit permissions from parent pages (see comments for solution)

We are currently experiencing a serious issue with page restrictions. We have pages with restrictions, that have sub pages, which were created by users, that were deleted from the user directory in the meantime. These root-pages have read restrictions, set for a particular group. However, these s...

1.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2014/07/01 3:29 p.m.20 views

Subpages don't inherit permissions from parent pages (see comments for solution)

We are currently experiencing a serious issue with page restrictions. We have pages with restrictions, that have sub pages, which were created by users, that were deleted from the user directory in the meantime. These root-pages have read restrictions, set for a particular group. However, these s...

1.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2014/07/01 3:29 p.m.22 views

Subpages don't inherit permissions from parent pages (see comments for solution)

We are currently experiencing a serious issue with page restrictions. We have pages with restrictions, that have sub pages, which were created by users, that were deleted from the user directory in the meantime. These root-pages have read restrictions, set for a particular group. However, these s...

1.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2010/12/12 1:47 a.m.15 views

World Record : 404907 websites hacked by Iskorpitx (Turkish Hacker) !

404907 websites hacked by Iskorpitx Turkish Hacker Type the word "Iskorpitx" into Google, and see what you get. Exactly the same word spit back at you, except from any number of different sites. That's because Iskorpitx is the handle of a hacker who recently committed the biggest hacking incident...

6.7AI score
SaveExploits0
Rows per page
Query Builder