EUVD-2025-32134

Malicious code in bioql PyPI...

CVE-2025-56380

Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.getvalue API endpoint and a crafted script to the fieldname parameter...

CVE-2025-56380

A time-based blind SQL injection vulnerability (CWE-89) exists in the Frappe Framework (v15.72.4) and ERPNext (v15.67.0) within the frappe.client.get_value API endpoint. The root cause is the improper sanitization and concatenation of the fieldname parameter into SQL queries. An authenticated use...

Exploit for CVE-2025-56380

CVE-2025-56380 — Time-based Blind SQL Injection in Frappe / ER...