27619 matches found
CVE-2025-68078
creationtimestamp| type| source ---|---|--- 2025-12-16 09:24:02+00:00| seen| https://gist.github.com/Darkcrai86/365b6d7f1bfca8a5123bab58a5dd48cc...
CVE-2025-13956
creationtimestamp| type| source ---|---|--- 2025-12-16 08:00:46+00:00| seen| https://gist.github.com/Darkcrai86/914c4f098ee8e9f7c79be632d76ce14b 2026-02-07 19:25:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13956.yaml...
CVE-2025-43533
creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:37:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7mnw3tqi2r 2025-12-17 23:20:04+00:00| seen|...
CVE-2025-43475
creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7nfayiw62o...
CVE-2025-46292
creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7n4ckp6p2u...
CVE-2025-66439
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
CVE-2025-66440
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext/accounts/doctype/paymententry/paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
EUVD-2025-203391
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext/accounts/doctype/paymententry/paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
EUVD-2025-203392
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
CVE-2025-67747
creationtimestamp| type| source ---|---|--- 2025-12-15 18:20:51+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-565g-hwwr-4pp3 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA...
CVE-2025-66439
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
GHSA-84H7-RJJ3-6JX4
creationtimestamp| type| source ---|---|--- 2025-12-15 17:55:01+00:00| seen| https://mastodon.social/users/chrisvest/statuses/115724864576648010...
CVE-2025-13728
creationtimestamp| type| source ---|---|--- 2025-12-15 15:17:25+00:00| seen| https://gist.github.com/Darkcrai86/1eb623204ecd9f343ef93ce76f0cf28c...
CVE-2025-13950
creationtimestamp| type| source ---|---|--- 2025-12-15 15:16:57+00:00| seen| https://gist.github.com/Darkcrai86/5a21f59f100f2c4db6c7b3a75bc8f999...
CVE-2025-14698
creationtimestamp| type| source ---|---|--- 2025-12-15 08:50:25+00:00| seen| https://gist.github.com/Darkcrai86/3c94de353a99831d752bbbb62c7d710f...
Cross-site Scripting (XSS)
Vuetify is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unsanitized HTML being assigned to the innerHTML of the VDatePicker title via the title-date-format property, which allows an attacker to inject and execute arbitrary JavaScript in the victim’s browser...
ERPNext 安全漏洞
ERPNext is an open source enterprise resource planning solution from ERPNext India. A security vulnerability exists in ERPNext 15.89.0 and earlier versions, which stems from improper handling of the frompostingdate parameter in the getoutstandingreferencedocuments function, which could lead to an...
CVE-2025-66440
An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext/accounts/doctype/paymententry/paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...
PT-2025-51261
Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions through 15.89.0 Description A SQL injection issue exists in Frappe ERPNext. The get outstanding reference documents function within the erpnext/accounts/doctype/payment entry/payment entry.py file is susceptible to...
PT-2025-51260
Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions through 15.89.0 Description An issue exists in Frappe ERPNext that allows an attacker to extract arbitrary data from the database. The get outstanding reference documents function, located at...