PT-2024-37538 · WordPress · Generate Pdf Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: Generate PDF using Contact Form 7 plugin for WordPress versions up to, and including, 4.0.6 Description: The issue is due to missing nonce validation and the plugin not properly validating a file or its path prior to deleting it in the wp cf7...

Arbitrary File Deletion

gogs.io/gogs is vulnerable to Arbitrary File Deletion. The vulnerability is due to insufficient access controls, allowing unauthorized users to delete internal files on the host...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability

Subscriber+ Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin JetThemeCore versions 2.2.1...

ROS-20240704-08

A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests using the file to be unaware of the HSTS status they should have used. file will be unaware of the status of the...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

WordPress JetThemeCore Plugin < 2.2.1 is vulnerable to Arbitrary File Deletion

Software JetThemeCore Type Plugin Vulnerable versions 2.2.1 Fixed in 2.2.1 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-37497 Patch priority High CVSS severity High 7.7 Developer Crocoblock PSID 285d7262cac1 Credits Dave Jong Patchstack Required...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

WordPress Newspack Blocks Plugin <= 3.0.8 is vulnerable to Arbitrary File Deletion

Software Newspack Blocks Type Plugin Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-37423 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID a16694974ae5 Credits Rafie Muhammad...

The vulnerability of the Trend Micro VPN Proxy One Pro network software lies in its ability to delete arbitrary files from the system, allowing attackers to increase their privileges.

The vulnerability of the Trend Micro VPN Proxy One Pro network software is related to the possibility of deleting arbitrary files from the system. Exploiting this vulnerability can allow a hacker to increase their privileges...

CVE-2024-5935

A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...

CVE-2024-5935 CSRF Vulnerability in imartinez/privategpt

A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...

CVE-2024-5935 CSRF Vulnerability in imartinez/privategpt

A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...

CVE-2024-5935

CVE-2024-5935 describes a CSRF vulnerability in imartinez/privategpt version 0.5.0 that lets an attacker delete all uploaded files on the server, causing data loss and service disruption for users. The issue stems from a CSRF flaw affecting the file-deletion functionality. Public details across m...

CVE-2024-6090 Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in .json on the target system, leading to a denial of service as users are unable to...

PT-2024-37379 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410 Description: A path traversal issue allows any user to delete other users' chat histories and any files ending in .json on the target system. This can lead to a denial of service, as users are unabl...

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

CVE-2024-37231 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Salon booking system versions = 9.9...