10653 matches found
VMware vCenter Server updates address multiple security vulnerabilities
3a. vCenter Server file upload vulnerability CVE-2021-22005 The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 3b. vCenter Server...
CVE-2021-24639
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server...
PT-2021-16155 · WordPress · Omgf
Name of the Vulnerable Software and Affected Versions: OMGF WordPress plugin versions prior to 4.5.4 Description: The issue allows any authenticated users to delete arbitrary files or folders on the server due to the lack of path validation, authorisation, and CSRF checks in the omgf ajax empty d...
Arbitrary file deletion
An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...
Cross site request forgery (csrf)
The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack...
Cross-Site Request Forgery (CSRF) in microweber/microweber
Description Attacker able to delete any file In Files module if this module enabled there isn't any csrf protection in this endpoint. Proof of Concept After open the PoC.html file you can see that the file with name 1.jpg will be deleted. //PoC.html history.pushState'', '', '/'...
ECOA Building Automation System - Arbitrary File Deletion
Exploit Title: ECOA Building Automation System - Arbitrary File Deletion Date: 25.06.2021 Exploit Author: Neurogenesia Vendor Homepage: http://www.ecoa.com.tw ECOA Building Automation System Arbitrary File Deletion Vendor: ECOA Technologies Corp. Product web page: http://www.ecoa.com.tw Affected...
ECOA Building Automation System Arbitrary File Deletion Vulnerability
ECOA building automation systems suffer from an arbitrary file deletion vulnerability. Many versions are affected. ECOA Building Automation System Arbitrary File Deletion Vendor: ECOA Technologies Corp. Product web page: http://www.ecoa.com.tw Affected version: ECOA ECS Router Controller - ECS...
The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system allows a hacker to delete any files they desire.
The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system is related to errors in link handling. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...
ECOA Building Automation System Arbitrary File Deletion
Summary 1 The Risk-Terminator Web Graphic control BEMS Building Energy Management System are designed to provide you with the latest in the Human Machine Interface HMI technology, for completely monitoring and controlling management. It may be used singly for small and medium sized facilities,...
Aruba Operating System Cross-Site Request Forgery Vulnerability (CNVD-2021-77608)
Aruba Operating System is the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, Inc. user interface to perform file deletion operations...
CVE-2020-20495
bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...
CVE-2020-20495
bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...
Arbitrary file deletion
bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...
The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is caused by a “race condition” that allows a malicious user to delete any file they want.
The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is due to a “race condition”. Exploiting this vulnerability allows an attacker to remotely delete any file they desire...
Aruba Operating System 跨站请求伪造漏洞
Aruba Operating System is the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, Inc. user interface to perform file deletion operations...
CVE-2020-20495
bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...
CVE-2020-20495
Bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin, exploitable via the deleteBackup parameter. This affects the backup component and can impact integrity and availability (CVSS:3.1 base score 9.1). No remediation details are provided in the supplied documents. ...
CVE-2021-36286
Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can be created by anynon-privileged user under some object...