CVE-2024-51747

CVE-2024-51747 व्यवस्थापक खाते से लॉग इन करें और सिस्टम सेटिंग्स में डेटाबेस डाउनलोड करें sqlite.db डेटाबेस में projecthasfiles को संशोधित करें संशोधित sqlite.db को gzip से कंप्रेस करें और इसे अपलोड करें। इसे प्रोजेक्ट में अपलोड करने के बाद और फ़ाइल को देखने/डाउनलोड करने के लिए क्लिक करने पर,...

CVE-2024-2432-PaloAlto-GlobalProtect-EoP

CVE-2024-2432 Palo Alto GlobalProtect EoP على نظام ويندوز، تم اكتشاف أن GlobalProtect إصدار التطبيق 6.1.1-5 و6.2.0-89 كان عرضة لحذف الملفات التعسفي بامتيازات مرتفعة عن طريق هجوم الرابط الرمزي مما يؤدي إلى رفع الامتيازات المحلية على الجهاز المحلي. تم ملاحظة أنه عندما يحاول مستخدم غير مميز على ويند...

Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. id: CVE-2021-46424 info: name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete author: gy741 severity:...

CVE-2026-75855

العنوان ثغرة اجتياز المسار في أوامر الخادم "create database" / "drop database" تسمح بكتابة وحذف ملفات تعسفية خارج دليل قاعدة البيانات المُهيأ الملخص تستخدم أوامر create database و drop database في نقطة النهاية POST /api/v1/server اسم قاعدة البيانات المقدم من المُتصل لبناء مسار نظام ملفات دون أي...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox antérieur à 7.0.16 est vulnérable à une élévation de privilèges locale via le suivi de liens symboliques, menant à une suppression arbitraire de fichiers et à un déplacement arbitraire de fichiers. VirtualBox tente de déplacer les fichiers journaux en tant que NT...

SysmonEoP

SysmonEoP إثبات مفهوم للحذف/الكتابة العشوائية للملفات في Sysmon CVE-2022-41120/CVE-2022-44704 الثغرة الأمنية تقع الثغرة في الكود المسؤول عن حدث ClipboardChange الذي يمكن الوصول إليه عبر RPC. يمكن للمستخدمين المحليين إرسال بيانات إلى خادم RPC، والتي ستُكتب بعد ذلك في دليل C:\Sysmon ArchiveDirector...

RazerEoP

RazerEoP PoC per l'eliminazione/spostamento arbitrario di file nel modulo Macro di Razer Synapse 3. Questo modulo consente all'utente di esportare le macro create in un file su disco e l'operazione sui file viene eseguita tramite il servizio Razer che viene eseguito come nt authority\system. Ho...

CVE-2026-73040

CVE-2026-73040 is a path traversal vulnerability in Dockge , a Docker Compose management tool. The stack-name allow-list check (^[a-z0-9_-]+$) is enforced only in the write path (save()), while read and delete operations (Stack.getStack, path getter) pass the name directly to path.join without va...

EUVD-2026-63102

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without...

EUVD-2026-62199

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes settings.path from a renderer-supplied object and uses the resulting directory for fs.mkdirSync, fs.writeFileSync,...

CVE-2026-52875

Streambert is a cross-platform Electron desktop app for streaming and downloading video. Prior to 2.6.0 , the perform-scheduled-backup IPC handler in src/ipc/storage.js accepts settings.path from a renderer-supplied object and performs filesystem operations (fs.mkdirSync, fs.writeFileSync, fs.rea...

CVE-2026-75855

ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names...

CVE-2026-75855 ArcadeDB before 26.8.1 Path Traversal via create/drop database

ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names...

PT-2026-78237

Name of the Vulnerable Software and Affected Versions Streambert versions prior to 2.6.0 Description The perform-scheduled-backup IPC handler in src/ipc/storage.js fails to verify if the settings.path provided by a renderer-supplied object is within an authorized backup location. This allows a...

CVE-2026-73653

Vitest (framework powered by Vite) has a vulnerability in Browser Mode provider commands prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6. The commands—upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces—accept browser-supplied file paths without enforcin...

CVE-2026-73653 Vitest: Browser Mode provider commands bypass the file-access permission gate

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWri...

PT-2026-71737

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWri...

CVE-2026-72604 Intelliants Subrion CMS - Path Traversal

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink without sanitization or path...

CVE-2026-72880

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and packages/server/src/services/certificate.ts joins that value to the certificate root withou...

CVE-2026-72880

Dokploy is affected by CVE-2026-72880. Before version 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and certificate.ts joins that value to the certificate root without confinement. An authenticated user with cer...