10655 matches found
CVE-2021-32000 clone-master-clean-up: dangerous file system operations
A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...
NCH Quorum has multiple vulnerabilities
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...
NCH IVM Attendant Directory Traversal Vulnerability (CNVD-2021-55908)
NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which could be exploited by an attacker to delete files by traversing the path with the logdeleteselected check0 parameter...
Multiple vulnerabilities in NCH Quorum (CNVD-2021-55904)
NCH Quorum is a teleconference server software. It can turn any computer into a teleconference server. The caller dials into the server to participate in a conference call. A directory traversal and arbitrary file deletion vulnerability exists in NCH Quorum, which can be exploited by an attacker ...
XOS Shop 1.0.9 - (Multiple) Arbitrary File Deletion (Authenticated) Vulnerability
Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on: Windows 10, XAMP...
XOS Shop 1.0.9 Arbitrary File Deletion
Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Date: 2021-07-25 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on:...
XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Date: 2021-07-25 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on:...
Multiple vulnerabilities exist in NCH Quorum (CNVD-2021-55905)
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...
CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
CVE-2021-37443
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...
CVE-2021-37441
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37441
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
Directory traversal
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
CVE-2021-37443
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...
CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
Path traversal
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37441
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...
CVE-2021-37441
CVE-2021-37441 affects NCH Axon PBX v2.22 and earlier. The vulnerability is a path-traversal flaw in the logdelete function, exploitable via the logdelete?file=/.. parameter, enabling access to or deletion of arbitrary files outside the intended directory. The connected sources confirm the affect...