CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

CVE-2025-52042: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

ERPNext 安全漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. A security vulnerability exists in ERPNext version 15.57.5, which stems from an unvalidated txt parameter that could lead to an SQL injection attack...

CVE-2025-52039: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext 15.57.5, the function getmaterialrequestsbasedonsupplier at erpnext/stock/doctype/materialrequest/materialrequest.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the txt parameter...

CVE-2025-52039

In Frappe ERPNext version 15.57.5 , a SQL Injection vulnerability exists within the get_material_requests_based_on_supplier() function located at erpnext/stock/doctype/material_request/material_request.py. The root cause is an unvalidated txt parameter , which allows an attacker to inject malicio...

CVE-2025-52039

In Frappe ERPNext 15.57.5, the function getmaterialrequestsbasedonsupplier at erpnext/stock/doctype/materialrequest/materialrequest.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the txt parameter...

CVE-2025-4370

The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on processexternalasseturls function as well as missing path validation in storefile function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated...

CVE-2025-28386: Improper Control of Generation of Code

A remote code execution RCE vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file...

Exploit for Use After Free in Apple Ipados

CVE-2025-24252 iOS "Airborne" Vulnerabilities - Log Artifact E...

CVE-2020-14031

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the...

CVE-2020-21481

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file...

CVE-2019-0184

Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...

CLSA-2025-1743675732 avahi: Fix of 8 CVEs

CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject...

Malicious code in license-txt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-25138: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Rishi On Page SEO + Whatsapp Chat Button ops-robots-txt allows Stored XSS.This issue affects On Page SEO + Whatsapp Chat Button: from n/a through = 2.0.0...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

Security update for avahi

This update for avahi fixes the following issues: Security issues fixed: CVE-2023-38471: Extract host name using avahiunescapelabel bsc1216594. CVE-2023-38469: Reject overly long TXT resource records bsc1216598. Non-security issue fixed: no longer supply bogus services to callbacks bsc1226586...

SUSE-SU-2025:20032-1 Security update for avahi

This update for avahi fixes the following issues: Security issues fixed: - CVE-2023-38471: Extract host name using avahiunescapelabel bsc1216594. - CVE-2023-38469: Reject overly long TXT resource records bsc1216598. Non-security issue fixed: - no longer supply bogus services to callbacks bsc12265...

CVE-2024-10585

CVE-2024-10585 affects the InfiniteWP Client plugin for WordPress. The vulnerability is a path traversal issue in all versions up to and including 1.13.0, exploitable via the historyID parameter of the “~/debug-chart/index.php” file, enabling unauthenticated reading of arbitrary .txt files outsid...

WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by UKO Patchstack Alliance in WordPress Plugin Ads.txt & App-ads.txt Manager for WordPress versions = 1.1.7.1...