Arbitrary file deletion

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...

CVE-2022-23456

CVE-2022-23456 relates to HP Support Assistant and is described in multiple sources as a potential arbitrary file deletion vulnerability. The connected Red Hat/EU ENISA/Nessus entries corroborate the issue title but do not introduce new technical details beyond what HP documents state. The HP adv...

CVE-2022-23456

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

Mageia: Security Advisory (MGASA-2014-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Support Assistant 安全漏洞

HP Support Assistant is a solution from Hewlett-Packard HP that provides support for PCs and printers, etc. HP Support Assistant is vulnerable to arbitrary file deletion, which could be exploited by attackers to delete arbitrary files...

Arbitrary file deletion

SharpZipLib or ziplib is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that destDir ends with slash. If the destDir is not slash terminated like...

Arbitrary file deletion

SharpZipLib or ziplib is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is under a destination directory. However, it is not enforced that baseDirectory ends with slash. If the baseDirectory is not slash terminated...

SUSE SLED15 / SLES15 Security Update : rust1.55 (SUSE-SU-2022:0171-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0171-1 advisory. - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767. Tenable has extracted the preceding...

PT-2022-15623 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.2 Description: An event handler validation issue in the XPC Services API was addressed by removing the service. This issue may allow an application to delete files for which it does not have permission...

The vulnerability of JSP-based software technologies like Apache JSPWiki, due to lack of access control mechanisms, allows attackers to delete any files they desire.

The vulnerability of JSP-based software, such as Apache JSPWiki, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to delete arbitrary files using a specially crafted HTTP request...

High-Severity Rust Programming Bug Could Lead to File, Directory Deletion

The maintainers of the Rust programming language have released a security update for a high-severity vulnerability that could be abused by a malicious party to purge files and directories from a vulnerable system in an unauthorized manner. "An attacker could use this security issue to trick a...

Damon database management system has a file deletion vulnerability

Damon Database Management System is a centralized management platform to monitor, manage and maintain DM databases through a web interface. A file deletion vulnerability exists in Damon Database Management System, which can be exploited by attackers to delete files...

SUSE SLED15 / SLES15 Security Update : rust1.56 (SUSE-SU-2022:0149-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0149-1 advisory. - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767. Tenable has extracted the preceding...

CVE-2022-21658

A race condition flaw was found in Rust's std::fs::removedirall function. Rust applications that use this function may be vulnerable to a race condition where an unprivileged attacker can trick the application into deleting files and directories, causing an impact on system data integrity. If the...

U.S. Dept Of Defense: Arbitrary File Deletion (CVE-2020-3187) on ████████

Hello team, I hope you're doing well, healthy & wealthy. I found an Arbitrary File Deletion CVE-2020-3187 vulnerability on https://██████████/+CSCOE+/sessionpassword.html that allows the Arbitrary File Deletion. References - https://twitter.com/aboul3la/status/1286809567989575685 -...

CVE-2022-21658

CVE-2022-21658 affects Rust’s std::fs::remove_dir_all, due to a race condition (CWE-363) that could allow an attacker to trick a privileged process into deleting files/directories outside the target. Affected Rust releases: 1.0.0–1.58.0; patch released in 1.58.1. Impact can be significant for pri...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

CVE-2021-46255 affects eyouCMS v1.5.5-UTF8-SP3_1, where an insufficiently filtered filename parameter enables arbitrary file deletion. The attached details specify the root cause as inadequate input filtering in the filename parameter, leading to deletion of arbitrary files. The vulnerability is ...