EUVD-2022-30687

Malicious code in bioql PyPI...

EUVD-2024-51090

Malicious code in bioql PyPI...

EUVD-2023-46170

Malicious code in bioql PyPI...

EUVD-2025-10304

Malicious code in bioql PyPI...

EUVD-2025-10182

Malicious code in bioql PyPI...

EUVD-2023-39022

Malicious code in bioql PyPI...

EUVD-2024-35542

Malicious code in bioql PyPI...

EUVD-2023-47218

Malicious code in bioql PyPI...

EUVD-2024-21144

Malicious code in bioql PyPI...

EUVD-2022-43948

Malicious code in bioql PyPI...

EUVD-2023-46334

Malicious code in bioql PyPI...

EUVD-2023-29543

Malicious code in bioql PyPI...

EUVD-2024-23307

Malicious code in bioql PyPI...

CVE-2025-53595

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

QNAP Qsync Central SQL注入漏洞

QNAP Qsync Central is a private cloud synchronization service launched by Weilian QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices, with functions similar to GoogleDrive, Dropbox and other cloud storage services, but with the data stored in the...

CVE-2025-54153: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2024-56804: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

OmniParser Remote Code Execution Vulnerability

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network...

CVE-2024-45325

Fortinet FortiDDoS-F VPN/OSS component is affected by an OS Command Injection (CWE-78) in FortiDDoS-F versions 7.0.0–7.02 and earlier than 6.6.3. The root cause is improper neutralization of special elements in CLI requests, enabling a privileged attacker to execute unauthorized commands via craf...

CVE-2024-45325: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...