PT-2023-19953 · Pterodactyl · Wings

Name of the Vulnerable Software and Affected Versions: Wings versions prior to v1.11.4 Wings versions prior to v1.7.4 Description: This issue affects Wings, Pterodactyl's server control plane, allowing an attacker to delete files and directories recursively on the host system. The vulnerability c...

URI validation failure on SVG parsing. Bypass of CVE-2023-23924

Summary Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Details Dompdf parses the href attribute of image tags with the following code: src/Image/Cache.php line 135-150 php function $parser, $name,...

VMware Workstation 17.0.x < 17.0.1 Vulnerability (VMSA-2023-0003)

The version of VMware Workstation installed on the remote Windows host is 17.0.x prior to 17.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

The vulnerability of VMware Workstation’s hypervisor is related to access control errors, which allow a malicious user to delete arbitrary files from the root operating system.

The vulnerability of VMware Workstation hypervisor is related to access control errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the root operating system...

CVE-2023-20854

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...

Arbitrary file deletion

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...

CVE-2021-36425

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/incact/actftptakeover.php file...

PT-2023-12268 · Phpcms · Phpcms

Name of the Vulnerable Software and Affected Versions: phpcms version 1.9.25 Description: The issue allows remote attackers to delete arbitrary files due to a directory traversal vulnerability. This is achieved by exploiting an unfiltered file parameter in the unlink method within the include/inc...

CVE-2021-36425

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/incact/actftptakeover.php file...

The vulnerability of the Dompdf PHP library for generating PDF documents from HTML markup and CSS styles is related to improper validation before syntactic analysis and canonization. This allows a malicious user to delete arbitrary files or execute arbitrary code.

The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, is related to incorrect validation before syntactic analysis and canonization when processing tags with capital letters. Exploiting this vulnerability could allow an attacker to delete...

CVE-2023-20854

VMware Workstation 17.x (before 17.0.1) is affected by CVE-2023-20854, an arbitrary file deletion vulnerability that requires local privileges. The issue arises in VMware Workstation and can lead to deletion of arbitrary files on the host running the product. Remediation is to update to version 1...

CVE-2023-20854

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...

CVE-2023-20854

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed...

phpwcms 路径遍历漏洞

phpwcms is an open source web content management system. It is fast, easy to install and can run on any standard web server platform that supports PHP/MySQL. A directory traversal vulnerability exists in phpwcms version 1.9.25. A remote attacker can exploit this vulnerability to delete arbitrary...

KLA20212 DoS vulnerability in VMware Workstation

Arbitrary file deletion vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories VMSA-2023-0003 Related products VMware-Workstation CVE list CVE-2023-20854 critical Solution Update t...

CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

Arbitrary file deletion

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...

Arbitrary file deletion

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-0454

OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the application uses an unsanitized attacker-controlled parameter to construct an internal path...