CVE-2022-32199

dbconvert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter...

CVE-2022-32199

dbconvert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter...

Directory traversal

dbconvert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter...

Exploit for Improper Input Validation in Checkmk

CVE-2022-47909 - Unauthenticated Arbitrary File Deletion This...

CVE-2022-32199

CVE-2022-32199 affects ScriptCase versions up to 9.9.008, where a directory traversal in the file parameter of db_convert.php enables an admin to perform arbitrary file deletions. Root cause is unvalidated directory traversal allowing deletion of arbitrary files; impact per sources is limited to ...

CVE-2022-32199

dbconvert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter...

ScriptCase 路径遍历漏洞

NETMAKE SOLUÇÕES EM INFORMÁTICA LTDA ScriptCase is a professional and efficient PHP rapid code generation and development tool from NETMAKE SOLUÇÕES EM INFORMÁTICA LTDA. A security vulnerability exists in ScriptCase version 9.9.008 and earlier versions, which stems from a directory traversal...

CVE-2022-32199

dbconvert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter...

Exploit for Path Traversal in Scriptcase

CVE-2022-32199 ScriptCase python CVE-2022-32...

CVE-2023-26088

Malwarebytes (Windows) prior to version 4.5.23 is affected by CVE-2023-26088 due to a symbolic link abuse in the local quarantine system, which can be leveraged to delete arbitrary files and may enable privilege escalation in certain scenarios. The vulnerability targets the quarantine handling co...

CVE-2023-27977

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...

Design/Logic Flaw

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...

CVE-2023-27977

The CVE-2023-27977 entry describes an Insufficient Verification of Data Authenticity (CWE-345) weakness in Schneider Electric IGSS Data Server. Affected modules are IGSS Data Server (IGSSdataServer.exe), IGSS Dashboard (DashBoard.exe), and Custom Reports (RMS16.dll) all at version 16.0.0.23040 an...

CVE-2023-27977

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...

CVE-2023-27977

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected...

CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

Design/Logic Flaw

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

CVE-2022-45155

The CVE-2022-45155 issue affects openSUSE Factory’s obs-service-go_modules prior to 0.6.1. The root cause is an Improper Handling of Exceptional Conditions in obs-service-go_modules, enabling an attacker who can influence the service call to delete files and directories on the victim’s system. Co...

SAP NetWeaver AS 路径遍历漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A path traversal vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform, which could allow an attacker to exploit insufficient validation...