Arbitrary File Deletion Vulnerability in RGCMS Backend

RGCMS is an open source building management system, written in PHP with a Thinkphp 5.1 framework. RGCMS backend exists arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete sensitive files in the website...

NiuShop Single Merchant V4 Arbitrary File Deletion Vulnerability

NiuShop single merchant V4 system is a PHP open source mall system designed and developed by the mountain Hai Niu Zhi Yun Network Technology Co. NiuShop Single Merchant V4 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete system files...

File Deletion Vulnerability in Bacardi CMS Microstore

Bacardi CMS MicroMall is a content management system CMS for e-commerce. A directory traversal vulnerability exists in Baike CMS Microstore, which can be exploited by an attacker to traverse a deleted directory...

Arbitrary file deletion

Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure...

Kangtaike SolarView Compact 路径遍历漏洞

Kangtaike SolarView Compact is an application from Kangtaike Japan Inc. which provides photovoltaic power measurement systems. Kangtaike SolarView Compact SV-CPT-MC310 suffers from a path traversal vulnerability that could be exploited by an attacker to delete arbitrary files and/or directories o...

Shanghai Niuzhiyun Network Technology Co., Ltd.'s Single Merchant V4 System Has Arbitrary File Deletion Vulnerability

Single merchant V4 system is a framework using the new thinkphp6 + event development design + layui + uniapp for the design of open source merchant system. Shanghai Niuzhiyun Network Technology Co., Ltd. single merchant V4 system there are arbitrary file deletion vulnerability, an attacker can...

Security Bulletin: Vulnerabilities in XStream, Apache HTTP, Jackson Databind, OpenSSL, and Node.js affect IBM Spectrum Control

Summary Multiple vulnerabiilities in XStream, Apache HTTP components, FasterXML Jackson Databind, OpenSSL, and Node.js may affect IBM Spectrum Control. Vulnerability Details CVEID: CVE-2020-26258 DESCRIPTION: XStream is vulnerable to server-side request forgery, caused by a flaw when unmarshallin...

Arbitrary file deletion

This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class bundles/AdminBundle/Controller/Reports/CustomReportController.php. An authenticated user can reach this function with a GET...

RACOM M!DGE Directory Traversal Vulnerability

The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A directory traversal vulnerability exists in RACOM M!DGE firmware version 4.4.40.105. An attacker could exploit this vulnerability t...

CVE-2021-20072

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral...

CVE-2021-20072

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral...

CVE-2021-20072

CVE-2021-20072 affects RACOM MIDGE firmware 4.4.40.105. The vulnerability is a directory traversal flaw in the firmware that, when authenticated, allows an attacker to arbitrarily access and delete files. Public risk details indicate high impact on confidentiality, integrity, and availability. Co...

Racom 路径遍历漏洞

The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A directory traversal vulnerability exists in RACOM M!DGE firmware version 4.4.40.105. An attacker could exploit this vulnerability t...

Arbitrary file deletion

DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page e.g., with...

NVIDIA GeForce Experience < 3.21.0 DoS

The version of NVIDIA GeForce Experience installed on the remote Windows host is prior to 3.21.0. It is, therefore, affected by a denial of service vulnerability in GameStream rxdiag.dll due to improper handling of log files. An unauthenticated, local attacker can exploit this issue, where an...

CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

Privilege escalation

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

CVE-2021-23873 McAfee Total Protection (MTP) privilege escalation vulnerability

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...