CVE-2025-66164

creationtimestamp| type| source ---|---|--- 2025-12-16 09:36:58+00:00| seen| https://gist.github.com/Darkcrai86/0a197507fd918e7bf683239e70f34103...

CVE-2025-67983

creationtimestamp| type| source ---|---|--- 2025-12-16 09:31:41+00:00| seen| https://gist.github.com/Darkcrai86/38e5023642b43665c5d9bfb747128660...

CVE-2025-68053

creationtimestamp| type| source ---|---|--- 2025-12-16 09:29:29+00:00| seen| https://gist.github.com/Darkcrai86/e42f4fdab7a876df6f978d4ca52f170f 2025-12-16 11:00:33+00:00| seen| https://gist.github.com/Darkcrai86/c838d8df677acadadbc4fbaedb28fdd6...

CVE-2025-68076

creationtimestamp| type| source ---|---|--- 2025-12-16 09:24:45+00:00| seen| https://gist.github.com/Darkcrai86/65cec91acbfa3a58a1dc8fff43d7cdda...

CVE-2025-68078

creationtimestamp| type| source ---|---|--- 2025-12-16 09:24:02+00:00| seen| https://gist.github.com/Darkcrai86/365b6d7f1bfca8a5123bab58a5dd48cc...

CVE-2025-13956

creationtimestamp| type| source ---|---|--- 2025-12-16 08:00:46+00:00| seen| https://gist.github.com/Darkcrai86/914c4f098ee8e9f7c79be632d76ce14b 2026-02-07 19:25:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13956.yaml...

CVE-2025-43533

creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:37:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7mnw3tqi2r 2025-12-17 23:20:04+00:00| seen|...

CVE-2025-43475

creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7nfayiw62o...

CVE-2025-46292

creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 21:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7n4ckp6p2u...

CVE-2025-66439

An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...

CVE-2025-66440

An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext/accounts/doctype/paymententry/paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...

EUVD-2025-203391

An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext/accounts/doctype/paymententry/paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...

EUVD-2025-203392

An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...

CVE-2025-67747

creationtimestamp| type| source ---|---|--- 2025-12-15 18:20:51+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-565g-hwwr-4pp3 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA...

CVE-2025-66439

An issue was discovered in Frappe ERPNext through 15.89.0. Function getoutstandingreferencedocuments at erpnext.accounts.doctype.paymententry.paymententry.py is vulnerable to SQL Injection. It allows an attacker to extract arbitrary data from the database by injecting SQL payloads via the...

GHSA-84H7-RJJ3-6JX4

creationtimestamp| type| source ---|---|--- 2025-12-15 17:55:01+00:00| seen| https://mastodon.social/users/chrisvest/statuses/115724864576648010...

CVE-2025-13728

creationtimestamp| type| source ---|---|--- 2025-12-15 15:17:25+00:00| seen| https://gist.github.com/Darkcrai86/1eb623204ecd9f343ef93ce76f0cf28c...

CVE-2025-13950

creationtimestamp| type| source ---|---|--- 2025-12-15 15:16:57+00:00| seen| https://gist.github.com/Darkcrai86/5a21f59f100f2c4db6c7b3a75bc8f999...

CVE-2025-14698

creationtimestamp| type| source ---|---|--- 2025-12-15 08:50:25+00:00| seen| https://gist.github.com/Darkcrai86/3c94de353a99831d752bbbb62c7d710f...

Cross-site Scripting (XSS)

Vuetify is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unsanitized HTML being assigned to the innerHTML of the VDatePicker title via the title-date-format property, which allows an attacker to inject and execute arbitrary JavaScript in the victim’s browser...