CVE-2021-25068

CVE-2021-25068 affects the WordPress plugin “Sync WooCommerce Product feed to Google Shopping” (versions up to 1.2.4). The root cause is improper sanitization of the POST parameter feed_id, which is used in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard. Public e...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

CVE-2021-25068: Improper Neutralization of Special Elements used in an SQL Command

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feedid' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard...

PT-2022-9624

Name of the Vulnerable Software and Affected Versions Sync WooCommerce Product feed to Google Shopping WordPress plugin versions 1.2.4 and earlier Description The issue concerns a SQL injection vulnerability in the admin dashboard. It arises from the improper sanitization of the feed id POST...

PT-2025-8120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, where the cpsw ethtool begin function may return inconsistent values, leading to incorrect calls to pm runtime put. This inconsistency ca...

CVE-2022-26188

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost...

TotoLink N600R command injection vulnerability

TotoLink N600R is a wireless router from TotoLink, Taiwan, China. TotoLink N600R has a command injection vulnerability hole, which can be exploited by attackers via /setting/NTPSyncWithHost...

PT-2022-2057 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions 1.0.0 and earlier Argo CD versions 0.8.0 through 0.9.x Argo CD versions 0.5.0 through 0.7.x Description: The issue is related to an improper access control bug in Argo CD, allowing a malicious user to potentially escalate the...

PT-2025-8173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak issue in the Linux kernel's ASoC rockchip component has been identified. The problem occurs because pm runtime get sync increments the PM usage counter even if it fails,...

PT-2022-17728 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

CVE-2022-0659

The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Cross site scripting

The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0659 Sync iCloud COS < 2.0.1 - Admin+ Stored Cross-Site Scripting

The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0659

CVE-2022-0659 affects the WordPress plugin “Sync QCloud COS” (pre-2.0.1). The vulnerability stems from the plugin not escaping certain settings, allowing admin or high-privilege users to perform Stored Cross-Site Scripting (XSS) even when unfiltered_html is disallowed. Impact is administrative/XS...

PT-2022-13338

Name of the Vulnerable Software and Affected Versions Sync QCloud COS WordPress plugin versions prior to 2.0.1 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because some settings are not properly escaped, enabling the...

CVE-2022-0659: Improper Neutralization of Input During Web Page Generation

The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Keyboard layout dynamic sync not working with East Asian, Cyrillic language usernames

When a user using Windows English OS and the username chars are East Asian/Cyrillic Unicode, the Keyboard layout dynamic sync of the Citrix Workspace App will not work. The remote language bar’s language will always be the first-time synced language when the session is created. Changing Microsoft...

Low: Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

CVE-2021-25038

The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmussourceblog and wmusrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

CVE-2021-25038

The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmussourceblog and wmusrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...