WordPress Plugin Simple Backup 2.7.11 - Multiple Vulnerabilities

Meta information Exploit Title: Wordpress plugin simple-backup - Multiple vulnerabilities Date: 2016-06-02 Exploit Author: PizzaHatHacker A gmail . com Vendor Homepage: DEAD LINK https://wordpress.org/plugins/simple-backup/ Software Link: DEAD LINK...

WordPress Simple Backup Plugin 2.7.11 - Multiple Vulnerabilities

Simple Backup plugin is prone to multiple vulnerabilities, such as arbitrary file deletion and file download vulnerabilities. Because of these issues, an attacker can download remote files from the webserver delete arbitrary files without any authentication and permission. Solution Update the...

WordPress Simple Backup 2.7.11 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Meta information Exploit Title: Wordpress plugin simple-backup - Multiple vulnerabilities Date: 2016-06-02 Exploit Author: PizzaHatHacker A gmail . com Vendor Homepage: DEAD LINK https://wordpress.org/plugins/simple-backup/ Software Link: DEAD...

Arbitrary file deletion

The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

LMCMS v4.0 全媒体库任意文件删除漏洞

No description provided by source...

LMCMS Backend Arbitrary File Deletion Vulnerability

LMCMS Leming CMS system is a web content management system developed in Java language, developed by Beijing Leming Zhixin Technology Co., Ltd. and distributed under commercial license. LMCMS Leming CMS system management background full media library column under the file management provided in th...

The vulnerability of the Firefox browser, which allows a hacker to delete any files they want

The vulnerability of the Mozilla Maintenance Service updater for the Firefox browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files by manipulating local files...

ImageMagick Studio ImageMagick EPHEMERAL Encoder Arbitrary File Deletion Vulnerability

ImageMagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio. ImageMagick Studio A security vulnerability in ImageMagick's EPHEMERAL encoder allows a remote attacker to construct special images, trick users into parsing them, and delete arbitrary files...

YXcmsApp1.3.0补丁不当任意文件删除

No description provided by source...

phpshe backend arbitrary file deletion vulnerability

PHPSHE is the online shopping mall building program. An arbitrary file deletion vulnerability exists in the backend of phpshe. Attackers can utilize the vulnerability to obtain unlimited shell...

Advantech WebAccess Dashboard Viewer addFolder Directory Traversal Arbitrary File Deletion Denial of Service Vulnerability

This vulnerability allows remote attackers to deny service to all users on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WebAccess Dashboard Viewer. Insufficient validation within the addFolder...

Arbitrary file deletion

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

用友某集团平台存在设计缺陷可任意删除文件致系统崩溃

简要描述： 任意删除文件 详细说明： 目标系统：http://ufsdp.ufida.com/ 因为系统的logo被我测试时删除了，所以界面看起来有点丑 这一切都源于扫描器发现的一个文件 http://ufsdp.ufida.com/UploadFile.aspx 漏洞证明： UploadFile.aspx经过测试没法上传shell，但是我发现上传后，会出现已上传文件的列表，以及删除文件的X 即访问如下链接就可以达到删除logo的目的 http://ufsdp.ufida.com/UploadFile.aspx?d=../../Images/logo.gif 所以，如果访问...

Adobe Reader/Acrobat Arbitrary File Deletion Vulnerability

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. Adobe Reader/Acrobat Arbitrary File Deletion vulnerability allows attackers to synchronize the deletion of arbitrary files through Adobe cooperation...

Adobe Reader Arbitrary File Deletion Sandbox Escape Vulnerability

This vulnerability allows local attackers to delete arbitrary files on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Drupal OSF Module Arbitrary File Deletion Vulnerability

Drupal is a free and open source content management system developed in PHP. A security vulnerability exists in the Drupal OSF module, which can be exploited by remote attackers to delete arbitrary files when the OSF Ontology and OSF Import modules are enabled in the program...

Microsoft Windows Task Scheduler - 'DeleteExpiredTaskAfter' File Deletion Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=442 Windows: Task Scheduler DeleteExpiredTaskAfter File Deletion Elevation of Privilege Platform: Windows 8.1 Update, looks like it should work on 7 and 10 as well Class: Elevation of Privilege Summary: The Task Scheduler...

Microsoft Windows Task Scheduler - DeleteExpiredTaskAfter File Deletion Privilege Escalation

Microsoft Windows Task Scheduler - DeleteExpiredTaskAfter File Deletion Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=442 Windows: Task Scheduler DeleteExpiredTaskAfter File Deletion Elevation of Privilege Platform: Windows 8.1 Update, looks like...

kingcms任意php文件删除（可截断时升级为任意文件删除 ）

简要描述： 设计不当导致任意php文件删除 详细说明： 漏洞文件：global.php 好像是所有php文件都会调用该文件，该文件如下代码 //当cachepath值被提交过来的时候，删除对应的临时缓存文件 if!empty$POST'cachepath' $cachepath=ROOT.PATHCACHE.'/'.$POST'cachepath'.'.php'; ifisfile$cachepath unlink$cachepath;...

pfSense XSS and CSRF Vulnerabilities (pfSense-SA-15_04.webgui)

pfSense is prone to multiple cross-site scripting XSS vulnerabilities and a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...