EUVD-2023-24187

Malicious code in bioql PyPI...

EUVD-2024-46824

Malicious code in bioql PyPI...

EUVD-2025-22449

Malicious code in bioql PyPI...

EUVD-2024-15965

Malicious code in bioql PyPI...

EUVD-2024-33581

Malicious code in bioql PyPI...

EUVD-2025-27689

Malicious code in bioql PyPI...

EUVD-2025-29236

Malicious code in bioql PyPI...

EUVD-2024-32171

Malicious code in bioql PyPI...

EUVD-2023-28543

Malicious code in bioql PyPI...

EUVD-2022-29290

Malicious code in bioql PyPI...

EUVD-2025-22860

Malicious code in bioql PyPI...

EUVD-2023-42387

Malicious code in bioql PyPI...

EUVD-2024-27193

Malicious code in bioql PyPI...

EUVD-2022-46527

Malicious code in bioql PyPI...

CVE-2025-52867

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Centra...

EUVD-2025-32355

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 2025/07/09 and la...

CVE-2025-44007

CVE-2025-44007 affects QNAP Qsync Central. The issue is an unrestricted resource allocation vulnerability where a user-account–authenticated remote attacker can exhaust resources and block access for other systems, applications, or processes. A fix is available in Qsync Central 5.0.0.1 and later ...

CVE-2025-33034 Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-9198

The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-9859

Summary: CVE-2025-9859 affects the WordPress plugin “Fintelligence Calculator” (shortcode: fintelligence-calculator). The issue is Stored Cross-Site Scripting in versions up to 1.0.3 due to insufficient input sanitization and output escaping of user-supplied shortcode attributes. Impact: Authenti...