Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete

Arbitrary File Delete exist in Simple File List Plugin v 3.2.4 or below Authentication Required: Yes...

Ultimate Member Plugin for WordPress < 2.0.46 Multiple Vulnerabilities

The WordPress Ultimate Member Plugin installed on the remote host is affected by multiple vulnerabilities : - An arbitrary file read and delete vulnerability. - A Cross-Site Scripting XSS vulnerability exists due to improper validation of user-supplied input in admin dashboard. - A Cross-Site...

Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation Exploit

Exploit for windows platform in category local exploits Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m...

Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation

Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is...

Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation

Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m reporting in the same service. While I’ve tried to ensure all...

Download WP-DBManager <= 2.79.1 - Arbitrary File Delete

The WP-DBManager WordPress plugin was affected by an Arbitrary File Delete security vulnerability...

Arbitrary file reading vulnerability in YIXUNCMS 2.0.4.91SD backend

YIXUNCMS is a showcase website system developed by Yixun Software Studio for small and medium-sized enterprises, using PHP language and with a stable MYSQL database. YIXUNCMS2.0.4.91SD background arbitrary file reading vulnerability, the vulnerability stems from the system fails to strictly filte...

SeedDMS Path Traversal Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is SeedDMS enthusiasts jointly developed a set of PHP and MySql-based open source document management system . The system is mainly used to store and share documents. A directory traversal vulnerability exists in SeedDMS versions prior to 5.1.8. An...

CVE-2018-11808: Improper Input Validation

Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server in the context of the user which by default is "NT AUTHORITY / SYSTEM" by sending a specially...

Arbitrary file delete/D.O.S on Puppet Master

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. dot dot in a...

zzcms a arbitrary file delete

No description provided by source...

Directory traversal

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

CVE-2017-8853

CVE-2017-8853 affects Fiyo CMS 2.0.7. The vulnerability is in dapur/apps/app_config/controller/backuper.php, where a directory traversal in the file parameter (during an act=db action or type=database request) allows remote deletion of arbitrary files. The related entry CVE-2017-11630 describes a...

PT-2017-18583

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns an arbitrary file delete vulnerability. It is located in the dapur/apps/app config/controller/backuper.php file via directory traversal in the file parameter during an act=db action...

CVE-2017-8853: Improper Limitation of a Pathname to a Restricted Directory

Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/appconfig/controller/backuper.php via directory traversal in the file parameter during an act=db action...

thinkcmf \application\User\Controller\ProfileController.class.php arbitrary file delete vulnerability

No description provided by source...

PT-2017-8951

Name of the Vulnerable Software and Affected Versions Trend Micro Smart Protection Server versions 2.5 before build 2200 Trend Micro Smart Protection Server versions 2.6 before build 2106 Trend Micro Smart Protection Server versions 3.0 before build 1330 Description The issue allows remote...

CVE-2016-6269: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to 1 logmgtadhocqueryajaxhandler.php, 2...

CVE-2016-9380

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...