10693 matches found
CVE-2024-56731 Gogs deletion of internal files allows remote command execution
Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instanc...
Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385)
Overview Trend Micro Incorporated has released security updates for Trend Micro Internet Security and Trend Micro Maximum Security that contains a fix for a link following local privilege escalation vulnerability CVE-2025-49384, CVE-2025-49385. Trend Micro Incorporated reported this vulnerability...
TeamViewer Remote Management 安全漏洞
TeamViewer Remote Management is a remote management software from TeamViewer, Inc. A security vulnerability exists in TeamViewer Remote Management versions prior to 15.67, which stems from an improperly assigned privilege that results in arbitrary file deletion...
PT-2025-26744 · Teamviewer · Teamviewer
Name of the Vulnerable Software and Affected Versions: TeamViewer versions prior to 15.67 Description: The issue is related to an incorrect permission assignment for a critical resource in the TeamViewer Client, allowing a local unprivileged user to trigger arbitrary file deletion with SYSTEM...
WordPress Image Shadow plugin <= 1.1.0 - Arbitrary File Deletion Vulnerability
Arbitrary File Deletion Vulnerability discovered by ch4r0n in WordPress Plugin Image Shadow versions = 1.1.0...
CVE-2025-48443
Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend...
CVE-2025-49384
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49385
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
The vulnerability of the Nomad Module component of the 1E Client software allows a hacker to delete any files on the device.
The vulnerability of the Nomad Module component of the 1E Client software lies in the improper handling of symbolic links before accessing files. Exploiting this vulnerability could allow an attacker to delete any files on the device...
Dell PowerScale OneFS 安全漏洞
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...
Arbitrary Directory Creation Or File Deletion
salt is vulnerable to Arbitrary Directory Creation Or File Deletion. The vulnerability is due to lack of input validation on the tgtenv variable, which is used to construct file paths using os.path.join, allows attackers to supply malicious path components e.g., ../ to traverse directories...
CVE-2025-49385
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49384
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-48443
Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend...
CVE-2025-49385
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49385
CVE-2025-49385 affects Trend Micro Security 17.8 (Consumer). The vulnerability is a local privilege escalation via link following that could allow a local attacker to delete privileged Trend Micro files, including the product’s own files. Exploitation requires local access with low privileges and...
CVE-2025-49384
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49384
Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...
CVE-2025-49384
CVE-2025-49384 affects Trend Micro Security 17.8 (Consumer). The root cause is a link-following path in the Platinum Host Service that can be abused by a local attacker who can execute low-privilege code to trigger a symbolic link and cause deletion of privileged Trend Micro files (including its ...