https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 12 Aug 2026 23:06:42 +0000 https://vulnerability.circl.lu/sighting/9e2ba4e1-0674-4e29-8ddc-20be147d1776/export {"uuid": "9e2ba4e1-0674-4e29-8ddc-20be147d1776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-08-01T00:00:44.371683Z"} {"uuid": "9e2ba4e1-0674-4e29-8ddc-20be147d1776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-08-01T00:00:44.371683Z"} https://vulnerability.circl.lu/sighting/9e2ba4e1-0674-4e29-8ddc-20be147d1776/export Sat, 01 Aug 2026 00:00:44 +0000 https://vulnerability.circl.lu/sighting/a052aa5e-1a08-4445-88a7-d266271a4344/export {"uuid": "a052aa5e-1a08-4445-88a7-d266271a4344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-31T02:00:03.651124Z"} {"uuid": "a052aa5e-1a08-4445-88a7-d266271a4344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-31T02:00:03.651124Z"} https://vulnerability.circl.lu/sighting/a052aa5e-1a08-4445-88a7-d266271a4344/export Fri, 31 Jul 2026 02:00:03 +0000 https://vulnerability.circl.lu/sighting/643010a6-ef64-4985-80b4-6dce194c2aa9/export {"uuid": "643010a6-ef64-4985-80b4-6dce194c2aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-30T00:01:01.057564Z"} {"uuid": "643010a6-ef64-4985-80b4-6dce194c2aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-30T00:01:01.057564Z"} https://vulnerability.circl.lu/sighting/643010a6-ef64-4985-80b4-6dce194c2aa9/export Thu, 30 Jul 2026 00:01:01 +0000 https://vulnerability.circl.lu/sighting/17e9e889-2b56-465b-a15b-78aba7271eac/export {"uuid": "17e9e889-2b56-465b-a15b-78aba7271eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-29T12:00:35.109723Z"} {"uuid": "17e9e889-2b56-465b-a15b-78aba7271eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-29T12:00:35.109723Z"} https://vulnerability.circl.lu/sighting/17e9e889-2b56-465b-a15b-78aba7271eac/export Wed, 29 Jul 2026 12:00:35 +0000 https://vulnerability.circl.lu/sighting/31372e6e-d27d-474c-86e3-b28a882a8187/export {"uuid": "31372e6e-d27d-474c-86e3-b28a882a8187", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30853", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2d6db456-ac60-4fb2-b2e3-126aa593a288", "content": "", "creation_timestamp": "2026-06-19T12:46:55.845119Z"} {"uuid": "31372e6e-d27d-474c-86e3-b28a882a8187", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30853", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2d6db456-ac60-4fb2-b2e3-126aa593a288", "content": "", "creation_timestamp": "2026-06-19T12:46:55.845119Z"} https://vulnerability.circl.lu/sighting/31372e6e-d27d-474c-86e3-b28a882a8187/export Fri, 19 Jun 2026 12:46:55 +0000 https://vulnerability.circl.lu/sighting/b480f4a0-2649-454b-ae00-5f105f2c07fb/export {"uuid": "b480f4a0-2649-454b-ae00-5f105f2c07fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-32073\n\ud83d\udd39 Description: WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\ud83d\udccf Published: 2023-05-12T13:34:34.164Z\n\ud83d\udccf Modified: 2025-01-23T20:59:41.432Z\n\ud83d\udd17 References:\n1. https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\n2. https://github.com/WWBN/AVideo/commit/1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3", "creation_timestamp": "2025-01-23T21:03:27.000000Z"} {"uuid": "b480f4a0-2649-454b-ae00-5f105f2c07fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-32073\n\ud83d\udd39 Description: WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\ud83d\udccf Published: 2023-05-12T13:34:34.164Z\n\ud83d\udccf Modified: 2025-01-23T20:59:41.432Z\n\ud83d\udd17 References:\n1. https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\n2. https://github.com/WWBN/AVideo/commit/1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3", "creation_timestamp": "2025-01-23T21:03:27.000000Z"} https://vulnerability.circl.lu/sighting/b480f4a0-2649-454b-ae00-5f105f2c07fb/export Thu, 23 Jan 2025 21:03:27 +0000 https://vulnerability.circl.lu/sighting/c78ef96e-0c53-4ac5-9e0a-2ccc9e9d0564/export {"uuid": "c78ef96e-0c53-4ac5-9e0a-2ccc9e9d0564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3085", "type": "seen", "source": "https://t.me/cibsecurity/64962", "content": "\u203c CVE-2023-3085 \u203c\n\nA vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument request_path leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 22.10_b202303121313 is able to address this issue. The name of the patch is 24d7da2416b9ab246825c33c213fe939a89b369c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230663.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-03T20:09:25.000000Z"} {"uuid": "c78ef96e-0c53-4ac5-9e0a-2ccc9e9d0564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3085", "type": "seen", "source": "https://t.me/cibsecurity/64962", "content": "\u203c CVE-2023-3085 \u203c\n\nA vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument request_path leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 22.10_b202303121313 is able to address this issue. The name of the patch is 24d7da2416b9ab246825c33c213fe939a89b369c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230663.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-03T20:09:25.000000Z"} https://vulnerability.circl.lu/sighting/c78ef96e-0c53-4ac5-9e0a-2ccc9e9d0564/export Sat, 03 Jun 2023 20:09:25 +0000 https://vulnerability.circl.lu/sighting/9ce5acb6-c5a8-4219-8a24-63c83a9a9380/export {"uuid": "9ce5acb6-c5a8-4219-8a24-63c83a9a9380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/593", "content": "https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\nAVideo Authenticated RCE\ncve-2023-30854\n#github", "creation_timestamp": "2023-05-25T09:36:02.000000Z"} {"uuid": "9ce5acb6-c5a8-4219-8a24-63c83a9a9380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/593", "content": "https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\nAVideo Authenticated RCE\ncve-2023-30854\n#github", "creation_timestamp": "2023-05-25T09:36:02.000000Z"} https://vulnerability.circl.lu/sighting/9ce5acb6-c5a8-4219-8a24-63c83a9a9380/export Thu, 25 May 2023 09:36:02 +0000 https://vulnerability.circl.lu/sighting/1c4fc320-fd97-4b84-ac53-15a7a8391fb3/export {"uuid": "1c4fc320-fd97-4b84-ac53-15a7a8391fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/cibsecurity/64034", "content": "\u203c CVE-2023-32073 \u203c\n\nWWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:23.000000Z"} {"uuid": "1c4fc320-fd97-4b84-ac53-15a7a8391fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/cibsecurity/64034", "content": "\u203c CVE-2023-32073 \u203c\n\nWWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:23.000000Z"} https://vulnerability.circl.lu/sighting/1c4fc320-fd97-4b84-ac53-15a7a8391fb3/export Fri, 12 May 2023 18:27:23 +0000 https://vulnerability.circl.lu/sighting/6aa68947-b9d3-4548-93d2-fff2e28e753e/export {"uuid": "6aa68947-b9d3-4548-93d2-fff2e28e753e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30855", "type": "seen", "source": "https://t.me/cibsecurity/63456", "content": "\u203c CVE-2023-30855 \u203c\n\nPimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:44.000000Z"} {"uuid": "6aa68947-b9d3-4548-93d2-fff2e28e753e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30855", "type": "seen", "source": "https://t.me/cibsecurity/63456", "content": "\u203c CVE-2023-30855 \u203c\n\nPimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:44.000000Z"} https://vulnerability.circl.lu/sighting/6aa68947-b9d3-4548-93d2-fff2e28e753e/export Mon, 08 May 2023 22:37:44 +0000