CVE-2020-1465

CVE-2020-1465 affects Microsoft OneDrive. It is an elevation of privilege vulnerability that enables file deletion in arbitrary locations after a local login. Microsoft’s advisory (MSRC) states the fix is delivered by updating OneDrive to a newer build (e.g., 20.084.0426.0007); CVSS metrics on re...

CVE-2020-1461

CVE-2020-1461 is a Microsoft Defender elevation of privilege vulnerability in MpSigStub.exe that can allow deletion of files in arbitrary locations. Exploitation requires the attacker to log on to the system, then, with MpSigStub.exe running, execute crafted actions to delete protected files. Mic...

CVE-2020-1461

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'...

Microsoft OneDrive Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...

Windows Error Reporting Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have...

Microsoft Defender Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-48623)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-48624)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in Cscms of Guilin Chongsheng Network Technology Company Limited (CNVD-2020-47298)

Cscms is a multi-functional network information management system developed by Chongsheng Network Technology. Cscms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files from the server...

Advertising Plugin for WordPress Threatens Full Site Takeovers

The Adning Advertising plugin for WordPress, a premium plugin with over 8,000 customers, contains a critical remote code-execution vulnerability with the potential to be exploited by unauthenticated attackers. The plugin’s author, Tunafish, has rolled out a patched version v.1.5.6, which site...

Arbitrary file deletion

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors...

Arbitrary File Deletion Vulnerability in ZZCMS (CNVD-2020-47666)

ZZCMS is a free website builder developed in asp language. ZZCMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

VulnCheck KEV: CVE-2020-36728

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site...

Arbitrary File Deletion Vulnerability in Tongda CMS Blue Bilingual Corporate Website

Tongda CMS is a set of website management system specialized in building websites for small and medium-sized enterprises SMEs, which is developed by using PHP+MYSQL. Tongda CMS blue Chinese-English bilingual enterprise website has an arbitrary file deletion vulnerability that can be exploited by...

The vulnerability of Cisco AMP, a security tool for protecting against malicious software, and Clam Antivirus, an antivirus protection tool, arises due to synchronization errors when using a common resource. This vulnerability allows a hacker to delete any files they desire.

The vulnerabilities of the Cisco AMP anti-virus protection tool and the Clam Antivirus antivirus tool are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow attackers to delete arbitrary files...

Apple CMS has a logic flaw vulnerability

Apple CMS program is a fast website building system that runs on PHP+MYSQL environment. Apple CMS has a logic flaw vulnerability that can be exploited by attackers to delete arbitrary files and cause a system reinstallation...

Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call

Security nonce leak, allowing any authenticated users such as subscribers to make unauthorised AJAX call which could lead to arbitrary file deletion/download and function call. Note WPScanTeam: We do not consider the issue fully remediated, as the AJAX calls rely on CSRF check for authorisation,...

McAfee Total Protection Backlink Vulnerability

McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. A security vulnerability exists in McAfee MTP versions prior to 16.0.R26. A local attacker can exploit the vulnerability to delete files without authorization via a malicious script or program...

CVE-2020-7281

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...

Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 / 9.1.x < 9.1.1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7 or 9.1.x prior to 9.1.1. It is, therefore, affected by a vulnerability. - An external control of filename vulnerability in the...