Path traversal

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...

CVE-2020-5788

CVE-2020-5788 affects Teltonika firmware TRB2_R_00.02.04.3 where a relative path traversal in the admin/certificates/delete action allows a remote, authenticated attacker to delete arbitrary files on disk. Root cause: insufficient validation/sanitization of file paths in the delete endpoint. Impa...

CVE-2020-5788

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...

MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)

Exploit Title: MonoCMS Blog 1.0 - Arbitrary File Deletion Authenticated Date: 2020-09-20 Exploit Author: Shahrukh Iqbal Mirza @shahrukhiqbal24 Vendor Homepage: https://monocms.com/download Software Link: https://monocms.com/download Version: 1.0 Tested On: Windows 10 XAMPP CVE: N/A Proof of...

MonoCMS Blog 1.0 File Deletion / CSRF / Hardcoded Credentials

Exploit Title: MonoCMS Blog 1.0 - Arbitrary File Deletion Authenticated Date: 2020-09-20 Exploit Author: Shahrukh Iqbal Mirza @shahrukhiqbal24 Vendor Homepage: https://monocms.com/download Software Link: https://monocms.com/download Version: 1.0 Tested On: Windows 10 XAMPP CVE: N/A Proof of...

CVE-2020-21527

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal...

CVE-2020-21527

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal...

CVE-2020-21527

The CVE-2020-21527 entry concerns halo v1.1.3 with an Arbitrary file deletion vulnerability. The issue arises via a background backup function that, during deletion of backup files, allows a user to traverse directories and delete files outside the intended scope. Connected sources (Red Hat advis...

CVE-2020-21527

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal...

CVE-2020-25775

The Trend Micro Security 2020 v16 consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges...

CVE-2020-25775

The Trend Micro Security 2020 v16 consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges...

Race condition

The Trend Micro Security 2020 v16 consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges...

CVE-2020-25775

The Trend Micro Security 2020 v16 consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges...

CVE-2020-25775

CVE-2020-25775 affects Trend Micro Security 2020 (Consumer) and related products. Multiple connected sources describe a race condition in the Secure Erase feature that could let an unprivileged/local attacker delete files with higher privileges by abusing the feature’s file handling (vulnerabilit...

Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Ozeki NG SMS Gateway Arbitrary File Deletion Vulnerability

Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. An arbitrary file deletion vulnerability exists in the Outbox feature of the TXT File module in Ozeki NG SMS Gateway 4.17.6 and earlier versions. An attacker can exploit this vulnerability to delete all/most files ...

CVE-2020-14031

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the...

CVE-2020-14031

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the...

CVE-2020-14031

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the...

CVE-2020-14031

Ozeki NG SMS Gateway (versions up to 4.17.6) contains an arbitrary file deletion vulnerability in the TXT File module’s Outbox feature. An attacker can delete all/most files in a folder, with the product typically running under NT AUTHORITY\SYSTEM, meaning only running/security attribute-protecte...