10638 matches found
CVE-2022-27133
zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php...
CVE-2022-27277
The CVE-2022-27277 entry concerns InHand Networks InRouter 900 Industrial 4G Router. A vulnerability in the function sub_17C08 allows arbitrary file deletion. Affected product: InRouter 900 Industrial 4G Router prior to version v1.0.0.r11700. Impact and exposure per the connected data indicate ne...
CVE-2022-27277
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...
zbzcms安全漏洞
zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file deletion vulnerability, no detailed vulnerability details are provided at this time...
InHand Networks InRouter 900 路径遍历漏洞
The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, Inc. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, which can be exploited by attackers to perform arbitrary file deletion via the function sub17C08...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
Arbitrary file deletion
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
CVE-2021-46419 affects the Telesquare TLR-2855KS6. The publicly documented vector is an unauthenticated HTTP DELETE request to potentially delete arbitrary files on the device (example PoC targets /cgi-bin/test.cgi), which can destroy system files and render the device inoperable. The issue is ex...
Telesquare TLR-2855KS6 安全漏洞
The Telesquare TLR-2855KS6 is an LTE router from Telesquare Korea. A security vulnerability exists in the Telesquare TLR-2855KS6, which stems from an unauthorized file deletion vulnerability that could allow system files and scripts to be deleted via the DELETE method...
CVE-2022-0403
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...
Arbitrary file deletion
jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...
CVE-2021-39746
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
CVE-2021-39746
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
ALPINE-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
DEBIAN-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...