CVE-2026-65882

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...

CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...

CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...

CVE-2026-65882

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...

CVE-2026-65882

CVE-2026-65882 affects the Joomla Extension joomdle.com, specifically Joomdle versions prior to 3.1.1. The vulnerability is a reflected XSS in the moodle wrapper endpoint, exploitable via the goto url parameter. The CVSS-based assessment in the documents shows Network attack vector, required user...

CVE-2026-11841

creationtimestamp| type| source ---|---|--- 2026-07-28 12:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfcaovmt2a 2026-07-28 15:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrppujw4pe2z...

CVE-2026-14167

creationtimestamp| type| source ---|---|--- 2026-07-28 09:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp2uww2wo32 2026-07-28 11:32:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrpcrz7cxf2p...

EUVD-2026-49731

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-11756

creationtimestamp| type| source ---|---|--- 2026-07-28 08:30:53+00:00| seen| https://bsky.app/profile/suriq.io/post/3mroyo3n2wp23 2026-07-28 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrplxdruzy24...

CVE-2026-15136

creationtimestamp| type| source ---|---|--- 2026-07-28 08:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroy447cmm2s...

CVE-2026-65438

creationtimestamp| type| source ---|---|--- 2026-07-28 00:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5zt6dyj2i...

CVE-2026-65442

creationtimestamp| type| source ---|---|--- 2026-07-28 00:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5s5l3hl2s...

CVE-2026-65439

creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...

CVE-2026-55685

creationtimestamp| type| source ---|---|--- 2026-07-28 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4sldjp72o...

CVE-2026-65437

creationtimestamp| type| source ---|---|--- 2026-07-28 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4oqccbi27...

Linux Distros Unpatched Vulnerability : CVE-2026-45623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prio...

PT-2026-65524

Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix...

CVE-2026-51268

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the host parsing logic. The dismantlehost function parses untrusted host and URL input, and subsequent code uses clonefrom to copy parsed host, request host, extension and querystring segments into fixed heap...

EUVD-2026-49865

schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...

CVE-2026-43723

creationtimestamp| type| source ---|---|--- 2026-07-27 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnyt7hlpa2e 2026-07-28 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:20:36+00:00|...