EUVD-2022-34738

Malicious code in bioql PyPI...

EUVD-2021-33943

Malicious code in bioql PyPI...

EUVD-2022-44826

Malicious code in bioql PyPI...

EUVD-2025-6938

Malicious code in bioql PyPI...

EUVD-2023-45283

Malicious code in bioql PyPI...

EUVD-2021-31763

Malicious code in bioql PyPI...

EUVD-2024-32364

Malicious code in bioql PyPI...

EUVD-2024-53893

Malicious code in bioql PyPI...

EUVD-2022-1648

Malicious code in bioql PyPI...

EUVD-2024-45764

Malicious code in bioql PyPI...

EUVD-2024-1169

Malicious code in bioql PyPI...

EUVD-2024-41711

Malicious code in bioql PyPI...

EUVD-2024-39293

Malicious code in bioql PyPI...

CVE-2025-53406

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

EUVD-2025-32365

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers

A ‘high-volume’ extortion campaign possibly linked to FIN11 and Cl0p is targeting Oracle E-Business executives. Mandiant and GTIG are investigating unproven data theft claims...

Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL

Brazilian users have emerged as the target of a new self-propagating malware dubbed SORVEPOTEL that spreads via the popular messaging app WhatsApp. The campaign, codenamed Water Saci by Trend Micro, weaponizes the trust with the platform to extend its reach across Windows systems, adding the atta...

WordPress plugin Blappsta Mobile App SQL注入漏洞

WordPress Blappsta Mobile App plugin is a plugin that converts WordPress websites into native iOS and Android mobile apps. The WordPress Blappsta Mobile App plugin suffers from a SQL injection vulnerability that stems from the application missing validation of SQL statements in the nhynaacomments...

Scam Facebook groups send malicious Android malware to seniors

An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at "active seniors". Attackers used social engineering methods to lure targets into joining fake Facebook groups that appeared to promote travel and community activities—such as trips, dance classes, a...

WordPress plugin CTL Behance Importer Lite 安全漏洞

WordPress CTL Behance Importer Lite is a plugin for importing work from the Behance platform to a WordPress website, mainly used to help creators quickly migrate their work and optimize their website content management. The WordPress CTL Behance Importer Lite plugin suffers from an SQL injection...