2019 matches found
EUVD-2024-21215
Malicious code in bioql PyPI...
EUVD-2025-14468
Malicious code in bioql PyPI...
EUVD-2024-49654
Malicious code in bioql PyPI...
EUVD-2023-26537
Malicious code in bioql PyPI...
EUVD-2025-22716
Malicious code in bioql PyPI...
EUVD-2025-30882
Malicious code in bioql PyPI...
EUVD-2024-18547
Malicious code in bioql PyPI...
EUVD-2022-26131
Malicious code in bioql PyPI...
EUVD-2025-20626
Malicious code in bioql PyPI...
EUVD-2025-12758
Malicious code in bioql PyPI...
EUVD-2022-50633
Malicious code in bioql PyPI...
EUVD-2024-19953
Malicious code in bioql PyPI...
CVE-2024-56804
An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...
CVE-2025-57714
CVE-2025-57714 affects QNAP NetBak Replicator. The root cause is an unquoted search path/element vulnerability that permits a local attacker who has a user account to execute arbitrary code or commands. The vulnerability is reported to affect NetBak Replicator and has been fixed in version 4.5.15...
CVE-2025-57714 NetBak Replicator
An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...
CVE-2025-54153 Qsync Central
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...
EUVD-2025-32342
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...
CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...
PT-2025-39118
Name of the Vulnerable Software and Affected Versions WPCasa plugin for WordPress versions prior to 1.4.2 Description The WPCasa plugin for WordPress is susceptible to Code Injection due to insufficient input validation and restriction on the api requests function. This allows unauthenticated...
CVE-2025-54262
Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...