CVE-2025-59389Critical· 9.8▾ MidnightAn SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later
hyper_data_protector >= 2.1.0.0226, < 2.2.4.1hyper_data_protector = 2.0.0.1115Upgrade past the affected range:
hyper_data_protector 2.2.4.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-26244High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2026-26245High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2025-62849Critical· 9.8An SQL injection vulnerability has been reported to affect several QNAP operating system versions
CVE-2023-7299Medium· 6.3A vulnerability was found in DataGear up to 4.60
CVE-2023-27203Critical· 9.8Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.
CVE-2023-27202Critical· 9.8Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.