Lucene search
+L

22 matches found

Circl
Circl
•added 2026/01/22 1:14 a.m.•15 views

CVE-2026-23630

creationtimestamp| type| source ---|---|--- 2026-01-22 01:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxz3qaqqk2n 2026-08-27 20:35:03+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4o3wjm2r...

6.3CVSS5.8AI score0.00292EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/01/21 10:51 p.m.•12 views

CVE-2026-23630

Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cross-Site Scripting XSS. The frontend can render attacker-controlled Mermaid diagrams using mermaid.render, then inject the returned SVG/HT...

6.3CVSS6AI score0.00292EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-23630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept ...

7.5CVSS7.1AI score0.0132EPSS
SaveExploits0References2
Circl
Circl
•added 2025/01/22 3:19 p.m.•24 views

CVE-2025-23630

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo4tlal42f...

7.1CVSS6.9AI score0.0037EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/22 3:15 p.m.•7 views

CVE-2025-23630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad A.Khan Cyber Slider cyber-new-slider allows Reflected XSS.This issue affects Cyber Slider: from n/a through = 1.1...

7.1CVSS7.2AI score0.0037EPSS
SaveExploits0References3
NVD
NVD
•added 2025/01/22 3:15 p.m.•26 views

CVE-2025-23630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad A.Khan Cyber Slider cyber-new-slider allows Reflected XSS.This issue affects Cyber Slider: from n/a through = 1.1...

7.1CVSS0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•11 views

CVE-2025-23630 WordPress Cyber Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Cyber Slider allows Reflected XSS. This issue affects Cyber Slider: from n/a through 1.1...

7.1CVSS7AI score0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•47 views

CVE-2025-23630 WordPress Cyber Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad A.Khan Cyber Slider cyber-new-slider allows Reflected XSS.This issue affects Cyber Slider: from n/a through = 1.1...

7.1CVSS0.0037EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•66 views

CVE-2025-23630

CVE-2025-23630 corresponds to Cyber Slider (NotFound Cyber Slider). Connected data confirms a Reflected Cross-Site Scripting (XSS) vulnerability in Cyber Slider up to version 1.1, caused by improper input neutralization during web page generation. Public status indicates patch/fix is not yet avai...

7.1CVSS7.2AI score0.0037EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•6 views

Malware in down-load-available-zip-now-23630-non-stop-je-te-plie-en-deux-6jxm0-xjqkwj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Circl
Circl
•added 2024/01/26 1:31 a.m.•20 views

CVE-2024-23630

creationtimestamp| type| source ---|---|--- 2024-01-26 01:31:42+00:00| seen| https://t.me/ctinow/173925 2025-06-17 14:40:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18610...

9CVSS8.1AI score0.01523EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/25 11:41 p.m.•79 views

CVE-2024-23630

The CVE-2024-23630 entry concerns Motorola MR2600 routers. Affected component: firmware upload mechanism that accepts uploaded firmware images; root cause is an arbitrary firmware upload vulnerability enabling code execution on the device. Exploitation requires authentication, but the authenticat...

9CVSS8.7AI score0.01523EPSS
SaveExploits0References1Affected Software1
Circl
Circl
•added 2023/10/24 8:19 a.m.•17 views

CVE-2022-23630

creationtimestamp| type| source ---|---|--- 2023-10-24 08:19:51+00:00| seen| https://t.me/cibsecurity/37258...

7.5CVSS7.3AI score0.0132EPSS
SaveExploits0References1
Circl
Circl
•added 2023/02/01 7:13 a.m.•21 views

CVE-2023-23630

creationtimestamp| type| source ---|---|--- 2023-02-01 07:13:55+00:00| seen| https://t.me/cibsecurity/57243...

8.6CVSS7AI score0.00614EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/01 12:38 a.m.•13 views

CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...

8.6CVSS8.5AI score0.00614EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2023/02/01 12:38 a.m.•2 views

@1023-ventures/basalt (>=0.5.0, <=0.7.6), @4c/docusaurus-preset (>=0.2.4, <=0.3.2) +219 more potentially affected by CVE-2023-23630 via eta (>=1.12.1, <=1.14.2)

eta NPM version =1.12.1, =0.5.0, =0.2.4, =0.0.2, =0.0.1, =0.3.9, =1.0.0, =2.1.27, =1.1.6, =2.1.0, =0.0.37, =0.1.2 and more Source cves: CVE-2023-23630 Source advisory: MEND:CVE-2023-23630...

8.6CVSS0.00614EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/02/01 12:38 a.m.•67 views

CVE-2023-23630 Cross-site (XSS) vulnerability with Express API in Eta

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...

8.6CVSS8.5AI score0.00614EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/02/10 8:10 p.m.•51 views

CVE-2022-23630 Dependency verification bypass in Gradle

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

7.5CVSS7.7AI score0.0132EPSS
SaveExploits0References3
CVE
CVE
•added 2022/02/10 8:10 p.m.•152 views

CVE-2022-23630

CVE-2022-23630 affects Gradle’s dependency verification bypass. When verification is disabled on some configurations but enabled on others, and the disabled configuration resolves first, common dependencies may skip verification for the enabled configuration. Gradle 7.4 addresses this by validati...

7.5CVSS7.5AI score0.0132EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2022/02/10 8:10 p.m.•87 views

CVE-2022-23630

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

7.5CVSS7.5AI score0.0132EPSS
SaveExploits0
Rows per page
Query Builder