CVE-2025-52048

Frappe CVE-2025-52048 affects Frappe 15.x.x prior to 15.72.0 and 14.x.x prior to 14.96.10. The vulnerability is a SQL Injection in the add_tag() function located at frappe/desk/doctype/tag/tag.py, where the dt parameter can be exploited to extract data from the database. Remediation: upgrade to F...

CVE-2025-10409

creationtimestamp| type| source ---|---|--- 2025-09-14 23:26:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytgvf4zvx2f...

CVE-2025-10413

creationtimestamp| type| source ---|---|--- 2025-09-14 23:21:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytgmgp6j62m 2025-09-15 06:20:11+00:00| seen| https://gist.github.com/Darkcrai86/9b46ddcbb079517c33040ecca9c28ffd...

CVE-2025-10407

creationtimestamp| type| source ---|---|--- 2025-09-14 23:11:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytg2jsrm32x...

CVE-2025-10410

creationtimestamp| type| source ---|---|--- 2025-09-14 22:56:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytfaxav4j2j...

CVE-2025-10405

creationtimestamp| type| source ---|---|--- 2025-09-14 21:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyt744hogs2c 2025-09-15 06:21:17+00:00| seen| https://gist.github.com/Darkcrai86/dec8cedc30dce480a710e590c8ac06cc...

CVE-2025-10404

creationtimestamp| type| source ---|---|--- 2025-09-14 20:51:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyt6bb3z4a2t 2025-09-15 06:21:35+00:00| seen| https://gist.github.com/Darkcrai86/5a8941cbe0eea50ddc1b03de31831b59...

CVE-2025-36035

creationtimestamp| type| source ---|---|--- 2025-09-14 17:07:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysrqkpxej2j...

CVE-2025-0164

creationtimestamp| type| source ---|---|--- 2025-09-14 17:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysrhmclv22t 2025-09-15 07:49:43+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lyuczfkt7k2i...

CVE-2025-10402

creationtimestamp| type| source ---|---|--- 2025-09-14 16:57:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysr6nvjhu2c...

CVE-2025-10399

creationtimestamp| type| source ---|---|--- 2025-09-14 16:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysr4ueoxk2i...

CVE-2025-10389

creationtimestamp| type| source ---|---|--- 2025-09-14 07:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrsy2cp232c...

CVE-2025-10390

creationtimestamp| type| source ---|---|--- 2025-09-14 07:42:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrs56zc6h2t...

CVE-2025-10392

creationtimestamp| type| source ---|---|--- 2025-09-14 07:17:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrqqhosz72j 2025-09-15 01:32:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lytnxuncg72q...

CVE-2025-10387

creationtimestamp| type| source ---|---|--- 2025-09-14 04:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrivywk2q2f...

CVE-2025-10386

creationtimestamp| type| source ---|---|--- 2025-09-14 04:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrimwyzgl2o...

CVE-2025-10385

creationtimestamp| type| source ---|---|--- 2025-09-14 01:31:55+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyr5h2ivga2b 2025-09-14 03:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrdlv7a222c...

CVE-2025-21035

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...

CVE-2025-21035

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...

CVE-2025-21035

CVE-2025-21035 describes an improper access control in Samsung Calendar. The vulnerability affects Samsung Calendar versions prior to 12.5.06.5 on Android 14 and prior to 12.6.01.12 on Android 15, potentially allowing a physical attacker to access data across multiple user profiles. Root cause is...