EUVD-2022-0927

Malicious code in bioql PyPI...

EUVD-2025-0172

Malicious code in bioql PyPI...

EUVD-2025-10549

Malicious code in bioql PyPI...

EUVD-2024-3233

Malicious code in bioql PyPI...

EUVD-2023-45801

Malicious code in bioql PyPI...

EUVD-2025-27751

Malicious code in bioql PyPI...

EUVD-2024-32987

Malicious code in bioql PyPI...

EUVD-2023-1827

Malicious code in bioql PyPI...

EUVD-2024-42818

Malicious code in bioql PyPI...

EUVD-2024-3358

Malicious code in bioql PyPI...

EUVD-2024-51041

Malicious code in bioql PyPI...

EUVD-2025-27052

Malicious code in bioql PyPI...

EUVD-2025-25190

Malicious code in bioql PyPI...

EUVD-2025-27754

Malicious code in bioql PyPI...

CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

CVE-2025-57714

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-54153

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2025-52867

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Centra...

CVE-2025-47211

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

CVE-2025-47210

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2...