EUVD-2021-28263

Malicious code in bioql PyPI...

EUVD-2025-22802

Malicious code in bioql PyPI...

EUVD-2024-17389

Malicious code in bioql PyPI...

EUVD-2025-1558

Malicious code in bioql PyPI...

EUVD-2025-8748

Malicious code in bioql PyPI...

EUVD-2025-24013

Malicious code in bioql PyPI...

EUVD-2025-23644

Malicious code in bioql PyPI...

EUVD-2025-2131

Malicious code in bioql PyPI...

EUVD-2025-25716

Malicious code in bioql PyPI...

EUVD-2023-25155

Malicious code in bioql PyPI...

EUVD-2022-28841

Malicious code in bioql PyPI...

EUVD-2022-5231

Malicious code in bioql PyPI...

EUVD-2025-18857

Malicious code in bioql PyPI...

EUVD-2024-3074

Malicious code in bioql PyPI...

EUVD-2025-25475

Malicious code in bioql PyPI...

CVE-2025-52862 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52429 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-9372 Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting

The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inject...

PT-2025-40580

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained administrator privileges, can trigger a denial-of-service DoS...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...