EUVD-2024-19953

Malicious code in bioql PyPI...

EUVD-2023-46990

Malicious code in bioql PyPI...

EUVD-2025-22716

Malicious code in bioql PyPI...

EUVD-2025-6381

Malicious code in bioql PyPI...

EUVD-2023-26537

Malicious code in bioql PyPI...

EUVD-2025-20626

Malicious code in bioql PyPI...

EUVD-2025-26128

Malicious code in bioql PyPI...

EUVD-2025-24348

Malicious code in bioql PyPI...

EUVD-2025-22336

Malicious code in bioql PyPI...

EUVD-2025-30882

Malicious code in bioql PyPI...

EUVD-2025-23033

Malicious code in bioql PyPI...

EUVD-2024-35165

Malicious code in bioql PyPI...

EUVD-2022-50633

Malicious code in bioql PyPI...

EUVD-2024-26416

Malicious code in bioql PyPI...

CVE-2024-56804

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2025-57714 NetBak Replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-57714

CVE-2025-57714 affects QNAP NetBak Replicator. The root cause is an unquoted search path/element vulnerability that permits a local attacker who has a user account to execute arbitrary code or commands. The vulnerability is reported to affect NetBak Replicator and has been fixed in version 4.5.15...

CVE-2025-54153 Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

EUVD-2025-32342

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...