Tassos Framework Plugin 访问控制错误漏洞

The Tassos Framework Plugin is a Joomla extension and functionality enhancement framework developed by Tassos Marinos. The Tassos Framework Plugin has a security vulnerability related to access control, which allows users to delete any file on the affected site...

SUSE CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

GHSA-JRHG-82W2-VVJ7 Gin-vue-admin has an arbitrary file deletion vulnerability

Impact Attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder The affected code: Affected interfaces: /api/fileUploadAndDownload/removeChunk POC: You can specify the...

PT-2025-12238

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version V12 Strawberry Description The issue concerns a function named upload app that does not properly filter user input for the filename value, leading to a Path Traversal error. This allows an attacker to delete any...

CVE-2024-57452

ChestnutCMS =1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder...

PT-2025-5604

Name of the Vulnerable Software and Affected Versions: Jellystat versions prior to 1.1.3 Description: Jellystat is a free and open source Statistics App for Jellyfin. In affected versions, Jellystat directly uses user input in the routes, which can lead to Path Traversal vulnerabilities. Although...

CVE-2024-57452: Files or Directories Accessible to External Parties

ChestnutCMS =1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows attackers to delete any file and folder...

PT-2023-20730

Name of the Vulnerable Software and Affected Versions Syncfusion EJ2 Node File Provider version 0102271 Description The issue allows an unauthenticated attacker to perform various malicious actions due to a directory traversal vulnerability in the filesystem-server.js component. On Windows, this...

CVE-2022-46331

An unauthorized user could possibly delete any file on the system...

CVE-2022-44280: Improper Limitation of a Pathname to a Restricted Directory

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

CVE-2022-32328

Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=deleteimg...

CVE-2022-32328

CVE-2022-32328 affects Fast Food Ordering System v1.0. The vulnerability is an arbitrary file deletion issue exploitable through the API endpoint /ffos/classes/Master.php?f=delete_img due to insufficient input/permission validation in the delete_img function. Impact statements in sources indicate...

CVE-2022-31973

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=deleteimg...

CVE-2022-31973

Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=deleteimg...

CVE-2021-37099: Improper Limitation of a Pathname to a Restricted Directory

There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file...

The vulnerability of the Master Configuration Wizard component of Kaspersky’s antivirus protection tools—Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud—allows a perpetrator to delete any file in the system.

The vulnerability of the Master Configuration Wizard component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud antivirus products is related to errors in processing symbolic links. Exploiting this...

CVE-2020-25044

Kaspersky Virus Removal Tool KVRT prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system...

The vulnerability of the Kaspersky Virus Removal Tool’s antivirus protection mechanism, related to deficiencies in access control, allows a malicious user to delete any file in the system.

The vulnerability of the Kaspersky Virus Removal Tool KVRT is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete the content of any arbitrary file in the system...

PT-2018-13147

Name of the Vulnerable Software and Affected Versions ASUSTOR Data Master versions 3.1.5 and below Description The issue allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in the wallpaper.cgi endpoint. Recommendations...

PT-2018-19074

Name of the Vulnerable Software and Affected Versions Gxlcms QY version 1.0.0713 Description The issue allows remote attackers to delete any file via directory traversal sequences in the id parameter of an "Admin-Data-del" request. This is due to a vulnerability in the...