ERPNext get_rfq_containing_supplier function SQL Injection Vulnerability

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the txt parameter of the getrfqcontainingsupplier function against externally entered SQL statements. An attacker can...

EUVD-2025-32006

Malicious code in bioql PyPI...

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

CVE-2025-52042

CVE-2025-52042 affects Frappe ERPNext 15.57.5. The vulnerable component is the function get_rfq_containing_supplier() in erpnext/buying/doctype/request_for_quotation/request_for_quotation.py, due to lack of validation of the txt parameter against externally entered SQL, enabling SQL Injection to ...

bad Actor can block the operation of mint by creating duplicate order by frunt runing original order

Lines of code Vulnerability details Impact bad Actor can block the operation of mint by creating duplicate order by frunt runing original order So basically the contracts are doing orders by users RFQ to system whether by API or front end. and make the mint process the problem is in the contract...

Threat Outbreak Alert RuleID33043: Email Messages Distributing Malicious Software on June 22, 2018

Medium Alert ID: 58278 First Published: 2018 June 22 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33043 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33036: Email Messages Distributing Malicious Software on June 22, 2018

Medium Alert ID: 58271 First Published: 2018 June 22 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33036 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32960: Email Messages Distributing Malicious Software on June 11, 2018

Medium Alert ID: 58147 First Published: 2018 June 11 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32960 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32800: Email Messages Distributing Malicious Software on May 17, 2018

Medium Alert ID: 57913 First Published: 2018 May 19 01:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32800 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32722: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57826 First Published: 2018 May 8 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32722 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32711: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57820 First Published: 2018 May 8 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32711 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID31921: Email Messages Distributing Malicious Software on February 16, 2018

Medium Alert ID: 56850 First Published: 2018 February 16 17:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31921 may contain the following files: Name |...

Threat Outbreak Alert RuleID31991: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56799 First Published: 2018 February 13 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31991 may contain the following files: Name |...

Threat Outbreak Alert RuleID31870: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56629 First Published: 2018 January 31 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31870 may contain the following files: Name |...

Threat Outbreak Alert RuleID31798: Email Messages Distributing Malicious Software on January 23, 2018

Medium Alert ID: 56518 First Published: 2018 January 23 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31798 may contain the following files: Name |...

Threat Outbreak Alert RuleID31778: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56494 First Published: 2018 January 18 18:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31778 may contain the following files: Name |...

Threat Outbreak Alert RuleID31586: Email Messages Distributing Malicious Software on December 11, 2017

Medium Alert ID: 56223 First Published: 2017 December 11 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31586 may contain the following files: Name |...

Threat Outbreak Alert RuleID31531: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56179 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31531 may contain the following files: Name |...

Threat Outbreak Alert RuleID31341: Email Messages Distributing Malicious Software on November 20, 2017

Medium Alert ID: 55974 First Published: 2017 November 20 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31341 may contain the following files: Name |...

Threat Outbreak Alert RuleID30559: Email Messages Distributing Malicious Software on September 12, 2017

Medium Alert ID: 55184 First Published: 2017 September 12 18:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30559 may contain the following files: Name ...