CVE-2026-78657

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2020-0753-and-CVE-2020-0754

Writeup и PoC для CVE-2020-0753, CVE-2020-0754 и шести неисправленных DOS-уязвимостей Windows Эксплуатация ошибки состояния гонки в файловой системе — анализ CVE-2020-0753 и CVE-2020-0754 Служба отчетов об ошибках Windows исправила 2 ошибки повышения привилегий в последний вторник исправлений. Эт...

kalici-dosya-silme-araci

Outil de suppression définitive de fichier & Outil de suppression permanente Ce projet est un outil simple qui permet aux utilisateurs de supprimer définitivement des fichiers spécifiés. Le programme écrase le fichier spécifié avec des données aléatoires, modifie le contenu du fichier, puis le...

EUVD-2026-69872

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms WordPress plugin (versions ≤ 1.4.11) is affected by an unauthenticated arbitrary file deletion vulnerability rooted in insufficient file path validation in the delete_submission_files function. An attacker submits a malicious path traversal URL via the plug...

CVE-2026-78657 SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2025-63298

CVE-2025-63298 SourceCodester Pet Grooming Management System 1.0 にパストラバーサル（パス横断）の脆弱性が確認されました。この脆弱性は admin/managewebsite.php コンポーネントに影響を及ぼします。管理者権限を持つ認証済みユーザーは、特別に細工された POST リクエストを送信することでこの欠陥を悪用し、Web サーバー上の任意のファイルを削除することが可能です。 https://vulners.com/cve/CVE-2025-63298...

CVE-2026-14982

The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server,...

CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE Произвольное удаление файлов с повышением привилегий до SYSTEM. Большая часть кода основана на указанном PoC от @filipdragovic. Спасибо @filipdragovic & @k0zmer : Статья в блоге: https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe...

CVE-2026-14982

The WP File Download plugin for WordPress (versions ≤ 6.3.4 ) is vulnerable to arbitrary file deletion via insufficient path validation in the delete function. Authenticated attackers with subscriber-level access or above can exploit a two-stage attack : first calling the file.save endpoint to pe...

EUVD-2026-69821

The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server,...

EUVD-2026-69720

WWBN AVideo contains a path traversal vulnerability in the API getapilogincode endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directory traversal sequences in the code parameter. Attackers can exploit this to destroy audit logs and probe for file...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif будет удалён...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe는 Linux 익스플로잇의 일종입니다. 해당 CVE는 CVE 2022-0847입니다. 이것을 사용하여 Ubuntu에서 모든 파일을 삭제합니다. 환경: Ubuntu 20.04 Linux Kernel 5.8 이것은 Ubuntu 20.04의 ova 파일입니다: https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228o365ttuedutw/EWPK1npa-V5EhebEOrwhocBMaKH12xVcIdtdkxxU3UFNg?e=clKIbQ...

CVE-2023-21752

CVE-2023-21752 Windows Backup 서비스의 임의 파일 삭제 취약점에 대한 PoC입니다. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 이 저장소에는 두 가지 익스플로잇이 포함되어 있습니다: v1 - 사용자가 선택한 파일을 삭제합니다. v2 - 임의 삭제를 악용하여 상승된 cmd 셸을 실행하려고 시도합니다. 매우 안정적이지 않으며, 여러 번 실행해야 할 수 있습니다. 물리적 머신에서 더 잘 작동합니다...

CVE-2026-84478

WWBN AVideo contains a path traversal vulnerability in the get_api_login_code API endpoint. Unauthenticated attackers can supply directory traversal sequences in the code parameter to delete arbitrary .log files on the server, enabling destruction of audit logs and probing for file existence (fil...

CVE-2025-11988

1 Extraire le nonce public cryptoajax root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s'...

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA EoP Version : avant 210.9.28693.62001 Résumé : J'ai découvert une vulnérabilité dans Tencent PC Manager où les fichiers et répertoires sous C:\Windows\Temp sont gérés de manière non sécurisée. Un attaquant peut exploiter des attaques par lien symbolique symlink pour...

duplicate-CVE-2025-4720-

cve-srms-drop-student-path-traversal CVE-2025-4720doublon Suppression arbitraire de fichiers dans SourceCodester SRMS 1.0 Description Une vulnérabilité de traversée de chemin existe dans le point de terminaison dropstudent.php de SourceCodester Student Result Management System SRMS 1.0...

WordPress SigmaForms Pro plugin <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field vulnerability discovered by Doan Dinh Van in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.11...