CVE-2025-53545 Press has a potential 2FA bypass

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed in commit...

CVE-2025-53545

The CVE-2025-53545 entry concerns Press, a Frappe custom app used with Frappe Cloud. The underlying issue is a lack of server-side validation that allows bypassing two-factor authentication (2FA) for users. The vulnerability description confirms that this is a 2FA bypass resulting from insufficie...

CVE-2025-53545 Press has a potential 2FA bypass

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed in commit...

CVE-2025-40714

creationtimestamp| type| source ---|---|--- 2025-07-08 14:05:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthhucqqss2o...

June 10, 2025—KB5060526 (OS Build 20348.3807)

None None...

CVE-2025-40715

creationtimestamp| type| source ---|---|--- 2025-07-08 13:26:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthfnsrkiv2t...

No thanks: Google lets its Gemini AI access your apps, including messages [updated]

If you're an Android user, you'll need to take action if you don’t want Google's Gemini AI to have access to your apps. That's because, regardless of your previous settings, Google now allows Gemini to interact with third-party apps. Through Gemini extensions, it already had the ability to...

CVE-2025-6743

creationtimestamp| type| source ---|---|--- 2025-07-08 10:06:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lth2jh2o3y2b...

CVE-2025-6746

creationtimestamp| type| source ---|---|--- 2025-07-08 10:01:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lth2aimlp52t...

CVE-2019-13638

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2...

CVE-2025-24004

creationtimestamp| type| source ---|---|--- 2025-07-08 07:08:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816354360150951 2025-07-08 07:10:33+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgql3inq6b2...

CVE-2025-53612

creationtimestamp| type| source ---|---|--- 2025-07-08 07:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgqa6tu3w2f...

CVE-2025-7160

creationtimestamp| type| source ---|---|--- 2025-07-08 06:44:11+00:00| seen| https://bsky.app/profile/potato.software/post/3ltgp6uoc5n2t...

CVE-2025-53610

creationtimestamp| type| source ---|---|--- 2025-07-08 06:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgozwfe7m2o...

CVE-2025-42981

creationtimestamp| type| source ---|---|--- 2025-07-08 04:02:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgg62cpht2s...

CVE-2025-42971

creationtimestamp| type| source ---|---|--- 2025-07-08 03:23:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgdxkh7j22l...

CVE-2025-40737

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-575/ 2025-07-08 14:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthhw4cqyu27 2025-07-10 10:00:00+00:00| seen|...

CVE-2025-40736

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-574/ 2025-07-08 14:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthihzark62w 2025-07-09 18:14:09+00:00| seen| https://t.me/icscert/1228 2025-07-10...

PT-2025-28475 · Frappe · Press

Name of the Vulnerable Software and Affected Versions: Press versions affected versions not specified Description: The issue concerns a lack of server-side validation for 2FA login, allowing users to circumvent this security measure. Press is a Frappe custom app that manages infrastructure,...

Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover

Exploit Title: Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover Date: October 25, 2024 Exploit Author: stealthcopter Vendor Homepage: https://stacksmarket.co/ Software Link: https://wordpress.org/plugins/stacks-mobile-app-builder/ Version: = 5.2.3 Tested on: Ubuntu...