53 matches found
CVE-2026-109702
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
EUVD-2026-102046
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
CVE-2026-109702
The maxfoundry Social Share Buttons WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions n/a through 1.31 . The root cause is the Improper Neutralization of Input During Web Page Generation , specifically within the share-button component. This vulnerability allows an a...
CVE-2026-109702 WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
PT-2026-114924
Name of the Vulnerable Software and Affected Versions maxfoundry Social Share Buttons versions prior to 1.32 Description An issue exists in the share-button component where improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS. Stored XSS occurs wh...
CVE-2026-109702: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
SUSE CVE-2026-63943
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-63943
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
EUVD-2026-45716
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-63943
The CVE-2026-63943 entry concerns the Linux kernel driver for the xpad (gamepad) device. It describes an out-of-bounds access in xpadone_process_packet(), which uses urb->actual_length as an index to the share-button byte (data[len-18] or data[len-26]); with len and data[0] under the device’s ...
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-63943
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
PT-2026-60402
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'twitter message' Sequoia Template Setting in all versions up to, and including, 4.16.3 due to insufficient input sanitization and output escaping. This makes it possible fo...
PT-2026-61260
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the xpadone process packet function. The function uses the len value obtained from urb-actual length to index the share-button byte at datalen - 1...
EUVD-2023-57960
Malicious code in bioql PyPI...
EUVD-2025-26039
Malicious code in bioql PyPI...
EUVD-2024-34392
Malicious code in bioql PyPI...
CVE-2025-9849
The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zmshbtn' shortcode in all versions up to, and including, 2.1.16 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
