WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

Meta Box <= 4.16.2 - Arbitrary File Deletion

The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion in the ajaxdeletefile function. The function accepts any attachmentid from the POST request and directly calls wpdeleteattachment or unlink without validating that the attachment belongs to the specified Meta Box field,...

Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization

The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.0.1 due to insufficient capability checking on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of unauthorized actions...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

EUVD-2026-69872

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-78657 SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms WordPress plugin (versions ≤ 1.4.11) is affected by an unauthenticated arbitrary file deletion vulnerability rooted in insufficient file path validation in the delete_submission_files function. An attacker submits a malicious path traversal URL via the plug...

CVE-2023-27470_Exercise

CVE-2023-27470 EoP（権限昇格）による Arbirary File Deletion 演習 このリポジトリには、CVE-2023-27470 を再現したローカル権限昇格の演習が含まれています。あなたのミッション（もし受け入れるなら）は、脆弱性を見つけて SYSTEM のコマンドプロンプトを取得することです！解答に飛びたい場合は、solution.txt を参照してください。任意ファイル削除の脆弱性とそのリスクについて詳しくは、SYSTEMへの道：任意ファイル削除の脆弱性が重要な理由 をご覧ください。 著者: Andrew Oliveau @AndrewOliveau...

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA 权限提升 版本：210.9.28693.62001 之前 摘要：我发现腾讯电脑管家存在一个漏洞，其中 C:\Windows\Temp 下的文件和目录处理不安全。攻击者可以利用符号链接（symlink）攻击，强制一个 SYSTEM 权限的进程删除任意文件，从而导致本地权限提升。具体来说，当使用“ioa”组件时，会定期启动一个名为 LegacyKBioawin.exe 的进程。在运行过程中，它会在 Temp 文件夹下创建 TencentDownload 目录，将文件下载至该目录中，然后以 SYSTEM...

CVE-2025-63298

CVE-2025-63298 在 SourceCodester Pet Grooming Management System 1.0 中发现了一个路径遍历漏洞，影响 admin/managewebsite.php 组件。具有管理员权限的已认证用户可以通过提交特制的 POST 请求利用此缺陷，从而删除 Web 服务器上的任意文件。 https://vulners.com/cve/CVE-2025-63298 https://www.sourcecodester.com/php/18340/pet-grooming-management-software-download.html...

CVE-2026-14982

The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server,...

CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE 任意文件删除至SYSTEM。大部分代码基于@filipdragovic引用的PoC。感谢@filipdragovic & @k0zmer : 博客文章：https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe 参考资料 https://support.hp.com/us-en/document/ish9869257-9869285-16/hpsbpy03895...

CVE-2026-14982

The WP File Download plugin for WordPress (versions ≤ 6.3.4 ) is vulnerable to arbitrary file deletion via insufficient path validation in the delete function. Authenticated attackers with subscriber-level access or above can exploit a two-stage attack : first calling the file.save endpoint to pe...

EUVD-2026-69821

The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server,...

EUVD-2026-69720

WWBN AVideo contains a path traversal vulnerability in the API getapilogincode endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directory traversal sequences in the code parameter. Attackers can exploit this to destroy audit logs and probe for file...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif 会被删除...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty PipeはLinuxエクスプロイトの一種です。そのCVEはCVE-2022-0847です。 これを使用して、Ubuntu上のすべてのファイルを削除します。 環境: Ubuntu 20.04 Linux Kernel 5.8 これはUbuntu 20.04のovaファイルです: https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228o365ttuedutw/EWPK1npa-V5EhebEOrwhocBMaKH12xVcIdtdkxxU3UFNg?e=clKIbQ パスワード:...

CVE-2026-84478

WWBN AVideo contains a path traversal vulnerability in the get_api_login_code API endpoint. Unauthenticated attackers can supply directory traversal sequences in the code parameter to delete arbitrary .log files on the server, enabling destruction of audit logs and probing for file existence (fil...

CVE-2025-11988

1 公開 cryptoajax nonce を抽出する root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s' Fallback...