CVE-2025-13225

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

EUVD-2025-198130

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225 Tanium addressed an arbitrary file deletion vulnerability in TanOS.

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225

CVE-2025-13225 affects Tanium TanOS with an arbitrary file deletion vulnerability. Reported by multiple sources (NVD, Red Hat, related advisories) and attributed to Tanium addressing the issue in TanOS. The available documents confirm a TanOS vulnerability enabling arbitrary file deletion, but do...

CVE-2025-13225 Tanium addressed an arbitrary file deletion vulnerability in TanOS.

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

Tanium TanOS 安全漏洞

Tanium TanOS is a specialized operating system from the American company Tanium. A security vulnerability exists in Tanium TanOS, which stems from the possibility of arbitrary file deletion...

PT-2025-47420

Name of the Vulnerable Software and Affected Versions Tanium versions affected versions not specified Description Tanium addressed an arbitrary file deletion issue in TanOS. The vulnerability allows for the deletion of arbitrary files. Recommendations At the moment, there is no information about ...

CVE-2025-13282

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

WordPress Data Tables Generator by Supsystic plugin Arbitrary File Deletion Vulnerability

WordPress Data Tables Generator by Supsystic plugin is WordPress plugin for creating interactive tables and charts that support data visualization and dynamic content presentation. WordPress Data Tables Generator by Supsystic plugin has an arbitrary file deletion vulnerability that stems from...

CVE-2025-13282

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

CVE-2025-13282

TenderDocTransfer (Chunghwa Telecom) exposes a combination of flaws: (1) an Absolute Path Traversal within one API that could allow deletion of arbitrary files on the user’s system, and (2) APIs with no CSRF protection, enabling unauthenticated remote attackers to trigger actions via phishing. Th...

CVE-2025-13282 Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

CVE-2025-13282 Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

EUVD-2025-197760

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

Chunghwa Telecom TenderDocTransfer 跨站请求伪造漏洞

Chunghwa Telecom TenderDocTransfer is an application from Chunghwa Telecom China. Chunghwa Telecom TenderDocTransfer suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF protection in the API and the presence of absolute path traversal, which could lead to an...

PT-2025-47110

Name of the Vulnerable Software and Affected Versions TenderDocTransfer affected versions not specified Description TenderDocTransfer, developed by Chunghwa Telecom, has an issue that allows for arbitrary file deletion. The application establishes a local web server and offers APIs for...

CVE-2025-12494

The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaximportfile function in all versions up to, and including, 2.12.28. This makes it possible for authenticated attackers, with author-level...

WordPress plugin Image Gallery – Photo Grid & Video Gallery 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. An authorization issue...

CVE-2025-12089

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cleanCache function in all versions up to, and including, 1.10.45. This makes it possible for authenticated attackers, with Administrator-level acce...