CVE-2025-53508

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under Product Status...

CVE-2024-54568

A memory mishandling vulnerability exists in the ATS component of macOS Sequoia . Parsing a maliciously crafted file can lead to an unexpected app termination . This issue was addressed with improved memory handling and is fixed in macOS Sequoia 15.2 . Specific exploitation details or links are n...

CVE-2025-43268

A permissions issue in macOS Sequoia allows a malicious application to potentially gain root privileges . This vulnerability was addressed by implementing additional restrictions. The issue is fixed in macOS Sequoia 15.6 . Exploitation details are not provided in the documents, though a sighting ...

CVE-2025-30272: NULL Pointer Dereference

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later...

CVE-2025-30270: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-30267: NULL Pointer Dereference

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

PT-2025-35227

Name of the Vulnerable Software and Affected Versions: WhatsApp versions prior to v2.25.21.73 for iOS, versions prior to v2.25.21.78 for WhatsApp Business for iOS, and versions prior to v2.25.21.78 for WhatsApp for Mac. Description: WhatsApp was found to have an incomplete authorization flaw in...

PT-2025-35280

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A NULL pointer dereference issue exists in QNAP operating systems. Successful exploitation of this issue could allow a...

PT-2025-35286

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A path traversal vulnerability exists in QNAP operating systems. A remote attacker gaining administrator account acces...

PT-2025-35282

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A NULL pointer dereference issue exists in QNAP operating systems. Successful exploitation of this issue could allow a...

PT-2025-35279

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A path traversal vulnerability exists in QNAP operating systems. A remote attacker who has obtained a user account can...

PT-2025-35274

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A command injection vulnerability exists in QNAP operating systems. A remote attacker who obtains a user account can...

PT-2025-35278

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A path traversal vulnerability exists in QNAP operating systems. A remote attacker who has obtained a user account can...

PT-2025-35276

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.5.3145 build 20250526 QNAP versions prior to QuTS hero h5.2.5.3138 build 20250519 Description A NULL pointer dereference issue exists in QNAP operating systems. A remote attacker gaining a user account can exploi...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed for Mac computers by Apple USA. A security vulnerability exists in Apple macOS that stems from a permissions issue that could lead to malicious applications gaining root access...

QNAP QTS and QNAP QuTS have security vulnerabilities

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QNAP QuTS: Code-related vulnerabilities

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QNAP QuTS have vulnerabilities related to path traversal.

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QNAP QuTS: Code-related vulnerabilities

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

PowerStore T OS Auth Bypass

The vulnerability of the microprogramming software in the PowerStore data storage system for T OS is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...