EUVD-2025-6408

Malicious code in bioql PyPI...

EUVD-2023-39960

Malicious code in bioql PyPI...

EUVD-2022-25930

Malicious code in bioql PyPI...

EUVD-2023-36984

Malicious code in bioql PyPI...

EUVD-2023-50358

Malicious code in bioql PyPI...

EUVD-2024-33039

Malicious code in bioql PyPI...

EUVD-2023-31280

Malicious code in bioql PyPI...

EUVD-2023-45495

Malicious code in bioql PyPI...

EUVD-2024-31782

Malicious code in bioql PyPI...

EUVD-2022-5248

Malicious code in bioql PyPI...

EUVD-2023-33308

Malicious code in bioql PyPI...

EUVD-2025-23358

Malicious code in bioql PyPI...

EUVD-2022-36916

Malicious code in bioql PyPI...

CVE-2025-52867

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Centra...

EUVD-2025-32355

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 2025/07/09 and la...

CVE-2025-44007

CVE-2025-44007 affects QNAP Qsync Central. The issue is an unrestricted resource allocation vulnerability where a user-account–authenticated remote attacker can exhaust resources and block access for other systems, applications, or processes. A fix is available in Qsync Central 5.0.0.1 and later ...

CVE-2025-33034 Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-9198

The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-9859

Summary: CVE-2025-9859 affects the WordPress plugin “Fintelligence Calculator” (shortcode: fintelligence-calculator). The issue is Stored Cross-Site Scripting in versions up to 1.0.3 due to insufficient input sanitization and output escaping of user-supplied shortcode attributes. Impact: Authenti...

PT-2025-40554

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1 Description An out-of-bounds write issue exists in Qsync Central. Successful exploitation could allow a remote attacker who has gained a user account to modify or corrupt memory. Recommendations Update t...