← All credits

Marco Paciaroni (BomboBombone)

25 vulnerability records and advisories credit this contributor.

CVE-2026-103440

pagetriagelist discloses suppressed reviewer usernames

CVE-2026-103442

MergeAccount PHP object injection via session-key substitution

CVE-2026-103441

Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing

CVE-2026-100380

Reflected XSS in Wikibase Special:SetLabel language validation

CVE-2026-100381

UploadWizard Flickr collection and set titles allow DOM XSS