https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:12:50.895225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-052 certa-2013-avi-052 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. La majorité concernent des fuite… 2026-10-27T23:12:50.980360+00:00 certa-2013-avi-052 https://cve.radiocsirt.org/vuln/euvd-2026-113437 EUVD-2026-113437 2026-10-27T23:12:50.980410+00:00 EUVD-2026-113437 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6112 fkie_cve-2012-6112 2026-10-27T23:12:50.980432+00:00

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

 https://cve.radiocsirt.org/vuln/ghsa-fx5h-3786-h2w6 GHSA-fx5h-3786-h2w6 — PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests 2026-10-27T23:12:50.980475+00:00

Affected: Packagist: moodle/moodle

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

 https://cve.radiocsirt.org/vuln/gsd-2012-6112 gsd-2012-6112 2026-10-27T23:12:50.980518+00:00 gsd-2012-6112 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6112 UBUNTU-CVE-2012-6112 2026-10-27T23:12:50.980537+00:00

Affected: Ubuntu:16.04:LTS: tinymce, Ubuntu:18.04:LTS: tinymce, Ubuntu:20.04:LTS: tinymce

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.