CVE-2022-45697

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...

PT-2023-5216 · N Able · N-Able Take Control Agent

Name of the Vulnerable Software and Affected Versions: N-able Take Control Agent versions 7.0.41.1141 through 7.0.42 Description: The issue is related to a Time-of-Check to Time-of-Use TOCTOU race condition in the BASupSrvcUpdater.exe service, which can be exploited via a pseudo-symlink at...

Razer Central 后置链接漏洞

Razer Central is the peripheral control center for Razer USA. A security vulnerability exists in versions prior to Razer Central v7.8.0.381, which stems from an arbitrary file deletion vulnerability found when working with files in the account directory...

CVE-2022-45697

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...

Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)

The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It was possible to trick a privileged process doing a recursive delete in an attacker controlled directory into deleting privileged files, on all operating systems. F...

WordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File Deletion

Software All In One Favicon Type Plugin Vulnerable versions = 4.7 Fixed in 4.8 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-24416 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID b9929b1d7eae Credits Mika Required privilege...

Arbitrary file deletion

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

CVE-2023-0862

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects...

NetModule NSRW 路径遍历漏洞

NetModule NSRW is a series of router software from NetModule, Inc. A security vulnerability exists in NetModule NSRW that stems from the presence of a path traversal vulnerability, which could lead to arbitrary file uploads and deletions, and could be exploited by an authenticated attacker to...

CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102 CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102

CVE-2023-0102 affects LS ELECTRIC XBC-DN32U (OS 01.80). The issue is a missing authentication for the deletion command, enabling an attacker to delete arbitrary files. Public documentation in connected sources confirms the device, OS version, and the deletion-command vulnerability, with related a...

SUSE CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

SUSE CVE-2009-1295

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors...

SUSE CVE-2010-4706

The pamsmclosesession function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pamxauth PAM check...

SUSE CVE-2012-1174

The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."...

SUSE CVE-2015-7829

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows mishandle junctions in the Synchronizer directory, which allows attackers to delete...

SUSE CVE-2017-5409

The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows...

SUSE CVE-2018-10916

It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server,...