160 matches found
CVE-2025-52042
In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...
CVE-2025-52042
In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...
CVE-2025-52042
In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...
PT-2025-40246
Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The get rfq containing supplier function located at erpnext/buying/doctype/request for quotation/request for quotation.py is susceptible to SQL Injection. An attacker can inject a SQL query through th...
ERPNext security vulnerabilities
ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the txt parameter of the getrfqcontainingsupplier function against externally entered SQL statements. An attacker can...
CVE-2025-56234
ATNA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the processing of TCP RST packets, PLC ATNA2000 has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within...
CVE-2025-56233
Openindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP packets with RST or SYN flag set, Openindiana has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be with...
Reflecting on Wallarm’s Journey: Growth, Resilience, and What Comes Next
By Ivan Novikov and Stepan Ilyin When we started Wallarm, we focused on the APIs that power modern apps. We built an API-first platform, used AI from day one, and secured early patents in behavior-based detection and automated policy creation. The result: real-time, inline blocking with automatic...
CVE-2025-8663
creationtimestamp| type| source ---|---|--- 2025-09-03 07:32:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxw4hardlc2w 2025-09-03 10:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwhbeqvhl2r...
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2025-1903)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apache Tomcat 9.0.0-M1 < 9.0.108 Denial of Service
The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.108, 10.1.0-M1 prior to 10.1.44 or 11.0.0-M1 prior to 11.0.10. It is, therefore, affected by a denial of service vulnerability due to Tomcat's HTTP/2 implementation vulnerable to the made you reset attack. Note tha...
Photon OS 4.0: Linux PHSA-2025-4.0-0831
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0831. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for Unrestricted Upload of File with Dangerous Type in Versa-Networks Versa_Director
Volt Typhoon APT Attack Visualization 🎯 Overview An inter...
GHSA-4342-X723-CH2F vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
Important: Red Hat Security Advisory: postgresql:15 security update
An update for the postgresql:15 module is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Linux Distros Unpatched Vulnerability : CVE-2024-43485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43485 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2025-9789
creationtimestamp| type| source ---|---|--- 2025-09-01 21:30:07+00:00| seen| https://gist.github.com/Darkcrai86/53b4cbcf46c6517713ff1d36867ce623 2025-09-01 23:03:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxspjzomn32v...
CVE-2025-0656
creationtimestamp| type| source ---|---|--- 2025-09-01 16:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxs2oeigi42j...