CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...

CVE-2026-65882

CVE-2026-65882 affects the Joomla Extension joomdle.com, specifically Joomdle versions prior to 3.1.1. The vulnerability is a reflected XSS in the moodle wrapper endpoint, exploitable via the goto url parameter. The CVSS-based assessment in the documents shows Network attack vector, required user...

CVE-2026-11841

creationtimestamp| type| source ---|---|--- 2026-07-28 12:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfcaovmt2a 2026-07-28 15:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrppujw4pe2z...

CVE-2026-14167

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:32:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcrz7cxf2p...

EUVD-2026-49731

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-11756

creationtimestamp| type| source ---|---|--- 2026-07-28 08:30:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3mroyo3n2wp23 2026-07-28 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplxdruzy24...

CVE-2026-15136

creationtimestamp| type| source ---|---|--- 2026-07-28 08:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroy447cmm2s...

CVE-2026-65438

creationtimestamp| type| source ---|---|--- 2026-07-28 00:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5zt6dyj2i...

CVE-2026-65442

creationtimestamp| type| source ---|---|--- 2026-07-28 00:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5s5l3hl2s...

CVE-2026-65439

creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...

CVE-2026-55685

creationtimestamp| type| source ---|---|--- 2026-07-28 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4sldjp72o 2026-08-05 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mse7x4p7ls2y 2026-08-05 19:07:07+00:00| seen|...

CVE-2026-65437

creationtimestamp| type| source ---|---|--- 2026-07-28 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4oqccbi27...

Linux Distros Unpatched Vulnerability : CVE-2026-45623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prio...

PT-2026-65626

Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.1.5 Description The sendFile function in the httpserver/handler.go file incorrectly derives the authorization filename from the raw req.URL.Path while opening the file using a cleaned path. This discrepancy allows an...

ROS-20260728-73-0010

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...

CVE-2026-51268

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2026-49865

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...

PT-2026-65524

Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix...

CVE-2026-43723

creationtimestamp| type| source ---|---|--- 2026-07-27 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnyt7hlpa2e 2026-07-28 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:20:36+00:00|...

CVE-2026-43749

creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysyqcws2c 2026-07-28 04:49:31+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:44+00:00|...