134 matches found
CVE-2025-62841
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62839
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62841 Hard-coded Cryptographic Key #2
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
EUVD-2025-211209
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62841
The HBS 3 Hybrid Backup Sync and Hybrid Backup Sync applications are affected by a hard-coded cryptographic key vulnerability (CWE-320). If exploited, this flaw could allow remote attackers to compromise the security of the system. Remediation is available in versions HBS 3 Hybrid Backup Sync 26....
CVE-2025-62841 Hard-coded Cryptographic Key #2
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
EUVD-2025-211208
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62839 Hard-coded Cryptographic Key #1
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62839
The software HBS 3 Hybrid Backup Sync and Hybrid Backup Sync is vulnerable to a use of hard-coded cryptographic key (CWE-321). This flaw could allow remote attackers to compromise system security. Remediation is available in versions 26.4.0.521 and later for HBS 3 Hybrid Backup Sync, and versions...
CVE-2025-62839 Hard-coded Cryptographic Key #1
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62839: QNAP Systems Inc.: An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid…
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
QNAP HBS 3 Hybrid Backup Sync encryption issue vulnerability
Versions prior to 26.4.0.521 of QNAP HBS 3 Hybrid Backup Sync, versions prior to 26.4.0.521 of Hybrid Backup Sync 26.4.0.521, and versions prior to 26.4.1.563 of Hybrid Backup Sync 26.4.1 contain an encryption vulnerability stemming from the use of a hard-coded encryption key. This vulnerability...
PT-2026-130668
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
CVE-2025-62841: QNAP Systems Inc.: An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid…
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
QNAP HBS 3 Hybrid Backup Sync encryption issue vulnerability
Versions prior to 26.4.0.521 of QNAP HBS 3 Hybrid Backup Sync, versions prior to 26.4.0.521 of Hybrid Backup Sync 26.4.0.521, and versions prior to 26.4.1.563 of Hybrid Backup Sync 26.4.1 contain an encryption vulnerability. This vulnerability stems from the use of a hard-coded encryption key,...
PT-2026-130669
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...
Malicious code in jtr-hbs (npm)
The package jtr-hbs was found to contain malicious code. --- Credit: OpenSSF source...
@nitro/app (>=12.0.0-beta.1, <=12.0.0) potentially affected by CVE-2026-87123 via hbs (4.3.0)
hbs NPM version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on hbs and may be impacted: - @nitro/app =12.0.0-beta.1, =12.0.0 Source cves: CVE-2026-87123 Source advisory: SNYK:JS-HBS-19784397...
Uncaught Exception
Overview hbs is an Express.js template engine plugin for Handlebars Affected versions of this package are vulnerable to Uncaught Exception in its async helper output escaping, where a helper value carrying a truthy but non-callable toHTML property causes handlebars' escapeExpression to invoke it ...
CVE-2026-87123
hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, resolves to an object whose toHTML property is truthy but not callable. Handlebars escapeExpression calls the toHTML...