Lucene search
+L

489 matches found

Packet Storm
Packet Storm
added 2022/05/12 12:00 a.m.269 views

TLR-2005KSH Arbitrary File Delete

Exploit Title: TLR-2005KSH - Arbitrary File Delete Date: 2022-05-11 Exploit Author: Ahmed Alroky Author Company : AIactive Version: 1.0.0 Vendor home page : http://telesquare.co.kr/ Authentication Required: No Tested on: Windows CVE: CVE-2021-46424 Proof-of-Concept Request DELETE /cgi-bin/test2.t...

9.4CVSS0.4AI score0.36459EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2022/05/11 6:15 p.m.5 views

CVE-2022-30059

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

6.5CVSS5.9AI score0.01154EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/11 6:15 p.m.87 views

CVE-2022-30059

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

6.5CVSS0.01154EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/11 6:15 p.m.31 views

CVE-2022-30059

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

6.5CVSS7.3AI score0.01154EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/11 6:15 p.m.28 views

Arbitrary file deletion

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

5.5CVSS6.5AI score0.01154EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/11 5:49 p.m.49 views

CVE-2022-30059

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php...

6.7AI score0.01154EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/11 5:49 p.m.82 views

CVE-2022-30059

Shopwind

6.5CVSS6.4AI score0.01154EPSS
SaveExploits1References1Affected Software1
Github Security Blog
Github Security Blog
added 2022/04/22 12:24 a.m.25 views

Typo3 Arbitrary File Delete

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver...

6.5CVSS7.4AI score0.00984EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/04/22 12:24 a.m.38 views

GHSA-9VXQ-MXW5-MCGP Typo3 Arbitrary File Delete

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver...

6.5CVSS6.7AI score0.00984EPSS
SaveExploits0References4
CVE
CVE
added 2022/03/18 6:00 p.m.70 views

CVE-2020-25178

ISaGRAF CVE-2020-25178 affects Rockwell Automation ISaGRAF Runtime 4.x/5.x when interfaced with ISaGRAF Workbench over TCP/IP. The protocol transmits data unencrypted, enabling a remote unauthenticated attacker to upload, read, and delete files. Affected product details and mitigations are suppor...

9.3CVSS8.1AI score0.01691EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2022/03/10 11:15 p.m.18 views

Race condition

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

3.3CVSS6.9AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/10 10:35 p.m.36 views

CVE-2022-0280 McAfee Total Protection (MTP) - File Deletion vulnerability

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

7.5CVSS7.8AI score0.00337EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2022/02/22 12:00 a.m.243 views

ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification

!/usr/bin/env python3 -- coding: utf-8 -- ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File CRUD Vendor: Industrial Control Links, Inc. Product web page: http://www.iclinks.com Product datasheet:...

0.5AI score0.37295EPSS
SaveExploits5
OSV
OSV
added 2022/02/09 3:17 p.m.5 views

DRUPAL-CONTRIB-2022-023

This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view under the scenario unauthenticated user knows path to visit the view and can attempt to delete files which results in duplicate files being created. To mitigate this issue without...

6.8AI score
SaveExploits0References1
Drupal
Drupal
added 2022/02/09 12:00 a.m.16 views

Fancy File Delete - Moderately critical - Access Bypass - SA-CONTRIB-2022-023

This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view under the scenario unauthenticated user knows path to visit the view and can attempt to delete files which results in duplicate files being created. To mitigate this issue without...

6.7AI score
SaveExploits0References6
OSV
OSV
added 2022/02/01 1:15 p.m.6 views

CVE-2021-24761

The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server...

6.5CVSS5.9AI score0.00599EPSS
SaveExploits2References1
OSV
OSV
added 2021/12/27 2:15 p.m.10 views

CVE-2021-45338

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the 1 arbitrary file delete, 2 write and 3 reset security...

7.8CVSS7.2AI score0.00381EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/12/27 2:15 p.m.10 views

CVE-2021-45338

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the 1 arbitrary file delete, 2 write and 3 reset security...

7.8CVSS7.2AI score0.00381EPSS
SaveExploits1References5
NVD
NVD
added 2021/12/27 2:15 p.m.20 views

CVE-2021-45338

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the 1 arbitrary file delete, 2 write and 3 reset security...

7.8CVSS0.00381EPSS
SaveExploits1References4
Prion
Prion
added 2021/12/27 2:15 p.m.18 views

Privilege escalation

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the 1 arbitrary file delete, 2 write and 3 reset security...

7.2CVSS8AI score0.00381EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder