CVE-2026-11161

CVE-2026-11161 affects Google Chrome due to an inappropriate implementation in DataTransfer. A crafted HTML page can leak cross-origin data, as described for Chrome versions prior to 149.0.7827.53. The described impact is a cross-origin data leak with Medium severity. The fix is to update to Chro...

CVE-2025-40830

CVE-2025-40830 affects Siemens SINEC Security Monitor before version 4.10.0. The issue is missing authorization checks for the file_transfer feature in ssmctl-client, enabling an authenticated, low-priv local attacker to read or write arbitrary files on the server or sensor. Mitigation: upgrade t...

EUVD-2025-33567

Newforma Info Exchange NIX provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent...

EUVD-2025-31757

Malicious code in bioql PyPI...

CVE-2025-10278

A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the argument ids/newOwnerUserId causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and...

Important: soci-snapshotter

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

PT-2024-38555 · WordPress · Terawallet – For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wallet for WooCommerce plugin for WordPress versions up to, and including, 1.5.6 Description: The issue arises from a numerical logic flaw when transferring funds to another user, allowing authenticated attackers with Subscriber-level access...

CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

DEBIAN-CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...