23 matches found
CVE-2026-72719 Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter
Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...
EUVD-2026-55654
Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...
CVE-2026-72719 Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter
Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable accountid parameter. This could break tenant isolation and cause cross-account...
PT-2026-69856
Name of the Vulnerable Software and Affected Versions Chatwoot versions prior to 4.9.0 Description Authenticated account administrators can transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts by manipulating the writable account id parameter. This flaw breaks tenant...
EUVD-2018-13488
Malware in sbrugna...
EUVD-2021-33237
Malicious code in bioql PyPI...
CVE-2021-46561
controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
The vulnerability of the Bank Account Transfer component in the Oracle Cash Management application of the Oracle E-Business Suite allows a malicious individual to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.
The vulnerability of the Bank Account Transfer component in the Oracle Cash Management application of the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, as well as gai...
CVE-2021-2227
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...
CVE-2021-2227
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...
CVE-2021-2227: Undefined Security Weakness
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...
PT-2021-2839
Name of the Vulnerable Software and Affected Versions: Oracle Cash Management versions 12.1.1 through 12.1.3 Description: The issue is related to insufficient access control in the Bank Account Transfer component of Oracle Cash Management in Oracle E-Business Suite. This can allow a remote attack...
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamlessly integrated management suite. Oracle Cash Manageme...
cPanel cross-site scripting vulnerability (CNVD-2019-29012)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in WHM Account Transfer in versions prior to cPanel 68.0.27. The vulnerability stems...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
Cross site scripting
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
PT-2019-10386
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.27 Description The issue allows self-stored XSS in WHM Account Transfer. Recommendations For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the issue...