ماه: فوریه 2026

CVE-2025-61644 – i18n XSS through Special:Watchlist
بیشتر بخوانید »
CVE-2025-61647 – UserInfoCard: Don’t allow access to information about users who are suppressed if you don’t have suppressor rights
بیشتر بخوانید »
CVE-2025-6589 – With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without ‘hideuser’ can see the hidden username in the BlockList
بیشتر بخوانید »
CVE-2025-6590 – Complete content leak of private wikis due to PasswordReset Wikitext injection in error message
بیشتر بخوانید »
CVE-2026-25228 – SignalK Server has Path Traversal leading to information disclosure
بیشتر بخوانید »
CVE-2025-6591 – HTML injection in API action=feedcontributions output from i18n message
بیشتر بخوانید »
CVE-2025-6592 – Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog
بیشتر بخوانید »
CVE-2025-6593 – “{{SITENAME}} registered email address has been changed” email sent to unverified email addresses
بیشتر بخوانید »
CVE-2026-25222 – PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint
بیشتر بخوانید »
CVE-2025-6594 – XSS in Special:ApiSandbox
بیشتر بخوانید »

صفحه قبلی صفحه بعدی