EUVD-2026-55654

Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...

CVE-2026-72719 Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter

Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...

CVE-2026-72719 Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter

Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...

PT-2026-69856

Name of the Vulnerable Software and Affected Versions Chatwoot versions prior to 4.9.0 Description Authenticated account administrators can transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts by manipulating the writable account id parameter. This flaw breaks tenant...

EUVD-2018-13488

Malware in sbrugna...

EUVD-2021-33237

Malicious code in bioql PyPI...

CVE-2021-46561

controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new...

CVE-2018-20950

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

The vulnerability of the Bank Account Transfer component in the Oracle Cash Management application of the Oracle E-Business Suite allows a malicious individual to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.

The vulnerability of the Bank Account Transfer component in the Oracle Cash Management application of the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, as well as gai...

CVE-2021-2227

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...

CVE-2021-2227

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...

CVE-2021-2227: Undefined Security Weakness

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamlessly integrated management suite. Oracle Cash Manageme...

cPanel cross-site scripting vulnerability (CNVD-2019-29012)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in WHM Account Transfer in versions prior to cPanel 68.0.27. The vulnerability stems...

CVE-2018-20950

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

Cross site scripting

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

CVE-2018-20950

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

CVE-2018-20950: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

eNom Inter-Account Transfer Issue

the m group security advisory 2017090100: Zero-confirmation inter-account transfers of .uk domains with eNom Discovery date: 2017-05-02 Publish date: 2017-09-01 +122 days Product: https://www.enom.com/, the website for eNom Inc. and their APIs, all eNom resellers Vulnerable: yes, as of publicatio...

Threat Outbreak Alert: Fake Account Transfer Notice Email Messages on April 14, 2014

Medium Alert ID: 33797 First Published: 2014 April 14 19:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account transfer notice for the recipient. The text in the email message attempts to convince the recipient t...