EUVD-2024-34105

Malicious code in bioql PyPI...

EUVD-2025-13957

Malicious code in bioql PyPI...

EUVD-2024-53855

Malicious code in bioql PyPI...

EUVD-2025-12902

Malicious code in bioql PyPI...

EUVD-2025-24455

Malicious code in bioql PyPI...

EUVD-2025-27758

Malicious code in bioql PyPI...

EUVD-2025-25455

Malicious code in bioql PyPI...

EUVD-2025-22629

Malicious code in bioql PyPI...

EUVD-2025-25195

Malicious code in bioql PyPI...

EUVD-2025-26875

Malicious code in bioql PyPI...

EUVD-2024-45367

Malicious code in bioql PyPI...

EUVD-2025-20679

Malicious code in bioql PyPI...

CVE-2025-54153

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2025-48729

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-33039

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

EUVD-2025-32344

An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP Authenticator...

CVE-2025-52432 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48728 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32354

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2...

CVE-2025-44011

CVE-2025-44011 affects QNAP Qsync Central prior to 5.0.0.1. The vulnerability is a NULL pointer dereference that allows a remote attacker with a valid user account to trigger a denial-of-service. Qsync Central 5.0.0.1 (dated 2025-07-09) and later contain the fix. Other connected sources corrobora...