https://vulnerability.circl.lu/sightings/feed 2026-08-25T19:46:45.337901+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/99e7148e-68ab-436b-b5a1-21dd970aa01d/export 2026-08-25T19:46:45.361697+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "99e7148e-68ab-436b-b5a1-21dd970aa01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtupnewzvx2j", "content": "CVE-2026-76565 is trending. Hype score 6, currently #8 on cvemon.\n\nJoomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76565", "creation_timestamp": "2026-08-25T01:55:46.607940Z"} 2026-08-25T01:55:46.607940+00:00 https://vulnerability.circl.lu/sighting/acc1beec-05f2-4f79-864c-70851c4ecdea/export 2026-08-25T19:46:45.364061+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "acc1beec-05f2-4f79-864c-70851c4ecdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117151851235145822", "content": "\u203c\ufe0f CVE PoC Published: CVE-2026-76565 - Reflected XSS in PhocaCart\nGitHub: https://github.com/toanln-cov/CVE-2026-76565\nA proof-of-concept has been released for CVE-2026-76565, a reflected cross-site scripting (XSS) vulnerability affecting PhocaCart \u2264 6.1.7 for Joomla.\nThe vulnerability exists in the price_from and price_to filter parameters within the mod_phocacart_filter module. Due to improper output encoding, unauthenticated attackers can craft a malicious URL that injects JavaScript into the page when viewed by a victim.\nThe PoC demonstrates:\n\u2022 Reflected XSS through crafted GET parameters\u2022 Exploitation of vulnerable price filter inputs\u2022 Attribute-context injection caused by missing htmlspecialchars() encoding\u2022 No authentication requirement for exploitation\u2022 Affected versions: PhocaCart \u2264 6.1.7\u2022 Fixed version: PhocaCart 6.1.8\n\ud83d\udca5 No delays. No guessing. No redactions. Get the intel before everyone else with Dark Web Informer.", "creation_timestamp": "2026-08-24T18:16:27.552813Z"} 2026-08-24T18:16:27.552813+00:00 https://vulnerability.circl.lu/sighting/ce043e99-fcee-498b-b4dd-1babdc455e09/export 2026-08-25T19:46:45.364215+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ce043e99-fcee-498b-b4dd-1babdc455e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99100", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76565\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 17:14:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReflected XSS via price_from & price_to Filter Parameters in PhocaCart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.428780Z"} 2026-08-23T00:00:31.428780+00:00 https://vulnerability.circl.lu/sighting/fa07615e-0e58-4ad9-b4a7-1d72ed83c464/export 2026-08-25T19:46:45.364327+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fa07615e-0e58-4ad9-b4a7-1d72ed83c464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "seen", "source": "https://t.me/GithubRedTeam/99100", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76565\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 17:14:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReflected XSS via price_from & price_to Filter Parameters in PhocaCart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.954837Z"} 2026-08-22T19:00:04.954837+00:00 https://vulnerability.circl.lu/sighting/f7bdb948-c80a-43f9-b35d-064f258d0a22/export 2026-08-25T19:46:45.364430+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f7bdb948-c80a-43f9-b35d-064f258d0a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "published-proof-of-concept", "source": "Telegram/20v2IoyFQshDHts5_7Yn4T7Cia_Iss1KLurhB1ZSh0DbW1c", "content": "", "creation_timestamp": "2026-08-22T00:00:09.658741Z"} 2026-08-22T00:00:09.658741+00:00 https://vulnerability.circl.lu/sighting/2567426b-4869-445d-a2fe-49030d70156b/export 2026-08-25T19:46:45.364531+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "2567426b-4869-445d-a2fe-49030d70156b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76565", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-76565", "content": "", "creation_timestamp": "2026-08-20T12:15:06.112462Z"} 2026-08-20T12:15:06.112462+00:00 https://vulnerability.circl.lu/sighting/8b553490-a246-468e-98dd-6e0c08ee711d/export 2026-08-25T19:46:45.365604+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8b553490-a246-468e-98dd-6e0c08ee711d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76565", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4ux6zdcluqupc", "content": "CVE-2026-76565 - Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7\nCVE ID : CVE-2026-76565\n \n Published : Aug. 20, 2026, 7:27 a.m. | 24\u00a0minutes ago\n \n Description : Joomla Extension - phoca.cz - Reflected XSS via ...", "creation_timestamp": "2026-08-20T08:14:55.771542Z"} 2026-08-20T08:14:55.771542+00:00