EUVD-2025-22336

Malicious code in bioql PyPI...

EUVD-2024-31375

Malicious code in bioql PyPI...

EUVD-2024-49654

Malicious code in bioql PyPI...

EUVD-2023-50785

Malicious code in bioql PyPI...

EUVD-2022-50653

Malicious code in bioql PyPI...

EUVD-2023-47509

Malicious code in bioql PyPI...

EUVD-2025-21885

Malicious code in bioql PyPI...

EUVD-2024-26416

Malicious code in bioql PyPI...

EUVD-2025-24348

Malicious code in bioql PyPI...

EUVD-2024-21215

Malicious code in bioql PyPI...

EUVD-2021-31270

Malicious code in bioql PyPI...

EUVD-2025-12758

Malicious code in bioql PyPI...

EUVD-2021-6681

Malicious code in bioql PyPI...

EUVD-2022-43883

Malicious code in bioql PyPI...

CVE-2024-56804

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2025-57714 NetBak Replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-57714

CVE-2025-57714 affects QNAP NetBak Replicator. The root cause is an unquoted search path/element vulnerability that permits a local attacker who has a user account to execute arbitrary code or commands. The vulnerability is reported to affect NetBak Replicator and has been fixed in version 4.5.15...

CVE-2025-54153 Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

EUVD-2025-32342

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...