CVE-2025-22003

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound read in strscpy source Commit 7fdaf8966aae "can: ucan: use strscpy to instead of strncpy" unintentionally introduced a one byte out of bound read on strscpy's source argument which is kind of ironic...

CVE-2025-22003 can: ucan: fix out of bound read in strscpy() source

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound read in strscpy source Commit 7fdaf8966aae "can: ucan: use strscpy to instead of strncpy" unintentionally introduced a one byte out of bound read on strscpy's source argument which is kind of ironic...

CVE-2025-22003

CVE-2025-22003 (Linux kernel, can: ucan): A one-byte out-of-bounds read was introduced in the can: ucan path due to a mismatch when using strscpy() with a length of len+1. The issue arises because strscpy() reads len+1 bytes from the source to detect truncation, even when the source is not NULL-t...

uCan Post <= 1.0.09 - Stored XSS

The ucan-post WordPress plugin was affected by a Stored XSS security vulnerability...

wordpress ucan post plugin <= 1.0.09 - Stored XSS

No description provided by source. Exploit Title: Wordpress uCan Post plugin = 1.0.09 Stored XSS Dork: inurl:/wp-content/plugins/ucan-post/ Date: 2012/01/18 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link:...

WordPress uCan Post 1.0.09 Cross Site Scripting

Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: [email protected]'"window.alertdocument.cookie Post Title is not sanitized and it's injectable with a...

Wordpress uCan Post plugin <= 1.0.09 Stored XSS

Exploit for php platform in category web applications Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: email protected'"window.alertdocument.cookie...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: [email protected]'"window.alertdocument.cookie Post Title is not sanitized and it's injectable with a...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC:...

WordPress UCan Post Plugin <= 1.0.09 - Stored XSS

UCan Post plugin is prone to a stored cross-site scripting vulnerability. It causes such problems as: name field and post title are not sanitized and it is injectable with a payload and email field is not sanitized but can it will check for a valid email address. Solution Update the plugin...