982 matches found
Siemens SINEC NMS 路径遍历漏洞
SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A path traversal vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the failure of a network system or product to properly filter special elements in a resourc...
CVE-2021-24639
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server...
F5 BIG-IP TMUI Remote Command Execution Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A remote command execution vulnerability exists in the F5 BIG-IP TMUI, which can be exploited by an authenticated attacker wi...
Pulse Secure Pulse Connect Secure 路径遍历漏洞
Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. Pulse Connect Secure suffers from a path traversal vulnerability that originates from an input validation error when processing a directory travers...
Trend Micro Apex One 访问控制错误漏洞
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. An access control error vulnerability exists in Trend Micro Apex One. The vulnerability stems from incorrect privilege assignment. A local...
Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.
Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file deletion vulnerability in the Library Cluster Management System of Guangzhou Tutron Computer Software...
CVE-2020-24146
Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...
Arbitrary File Deletion Vulnerability in Man City CMS
Man City CMS program is a complete and powerful rapid site building system developed with the core of CI framework and running in PHP MYSQL environment. ManCity CMS has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete files arbitrarily...
LaikeTui Path Traversal Vulnerability
LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. LaikeTui in the path traversal vulnerability , an attacker can exploit the vulnerability to delete arbitrary files...
LaikeTui 路径遍历漏洞
LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. LaikeTui in the path traversal vulnerability , an attacker can exploit the vulnerability to delete arbitrary files...
thefuck 路径遍历漏洞
thefuck is an open source application. Corrects errors in previous console commands. A path traversal vulnerability exists in thefuck, which can be exploited to arbitrarily delete files via the "undo archive operation" feature...
Rockwell Automation ISaGRAF 安全漏洞
Rockwell Automation ISaGRAF is an automation software technology for creating integrated automation solutions from Rockwell Automation. It is designed to be scalable and portable and is suitable for developing small controllers and large distributed automation systems. A security vulnerability...
Arbitrary file deletion
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
CVE-2020-36006
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.
A cross-site request forgery CSRF vulnerability was found in the config-file-provider Jenkins plugin. The plugin does not require POST requests for an HTTP endpoint which allows attackers to delete configuration files corresponding to an attacker-specified ID...
CVE-2021-20517
IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to read and delete arbitrary files on the system. IBM X-Force ID: 198435...
CVE-2021-29695
IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...
Dutchcoders transfer.sh 路径遍历漏洞
transfer.sh is a file sharing command line tool from Dutchcoders A security vulnerability exists in Dutchcoders transfer.sh before 1.2.4, which stems from allowing directory traversal to delete files...
LC-class Systems 路径遍历漏洞
LC-class Systems is a library classification system. Designed for the purposes and collections of the Library of Congress, it provides a guide to the actual library collections. A security vulnerability exists in LC-class Systems' IBM Host firmware that allows a remote attacker to traverse the...