EUVD-2024-34330

Malicious code in bioql PyPI...

EUVD-2022-5591

Malicious code in bioql PyPI...

EUVD-2023-54192

Malicious code in bioql PyPI...

EUVD-2024-1446

Malicious code in bioql PyPI...

EUVD-2022-3611

Malicious code in bioql PyPI...

EUVD-2022-4417

Malicious code in bioql PyPI...

EUVD-2025-27565

Malicious code in bioql PyPI...

EUVD-2023-58461

Malicious code in bioql PyPI...

EUVD-2024-17482

Malicious code in bioql PyPI...

EUVD-2022-41779

Malicious code in bioql PyPI...

EUVD-2024-46430

Malicious code in bioql PyPI...

EUVD-2022-1352

Malicious code in bioql PyPI...

EUVD-2023-32632

Malicious code in bioql PyPI...

EUVD-2022-15505

Malicious code in bioql PyPI...

CVE-2025-48730

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-48730

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-53407 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

CVE-2025-27236

CVE-2025-27236 describes an information-disclosure vulnerability in Zabbix API. A regular Zabbix user can use user.get (via api_jsonrpc.php) to search for other users within their user group and retrieve fields that the requester should not access, enabling data-mining of restricted field values....

CVE-2025-40636 SQL injection in the mod_vvisit_counter module

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...