October CMS Arbitrary File Read Vulnerability

October CMS is an open source content management system CMS based on PHP and Laravel web application framework. A security vulnerability exists in October CMS composer versions 1.0.319 and later fixed in version 1.0.466. An attacker could exploit the vulnerability to delete arbitrary local files...

CVE-2020-5296

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission...

Code injection

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission...

Arbitrary File Deletion vulnerability in OctoberCMS

Impact An attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Patches Issue has been patched in Build 466 v1.0.466. Workarounds Apply...

GHSA-JV6V-FVVX-4932 Arbitrary File Deletion vulnerability in OctoberCMS

Impact An attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Patches Issue has been patched in Build 466 v1.0.466. Workarounds Apply...

CVE-2020-5296 Arbitrary File Deletion vulnerability in OctoberCMS

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission...

Arbitrary File Deletion Vulnerability in Advantech WebAccessNode

Advantech WebAccessNode is a fully Internet Explorer based HMI/SCADA monitoring software. Advantech WebAccessNode suffers from an arbitrary file deletion vulnerability, which can be exploited by an attacker to delete files at any path within the system...

Arbitrary file deletion vulnerability in beescms

BEESCMS is a scalable content management system CMS based on PHP and MySQL. An arbitrary file deletion vulnerability exists in beescms, which can be exploited by an attacker to delete system files...

Arbitrary File Deletion Vulnerability in Monstra CMS

Monstra is a modern and lightweight content management system. Monstra CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files under the server...

Arbitrary File Deletion Vulnerability in Yunye CMS

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...

Arbitrary file deletion

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2020-32581)

Aptar CMS website management system is developed with PHP+MYSQL technology and MVC model, with a clear structure and easy-to-maintain code. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete server files...

Nutanix: AWS S3 bucket writeable for authenticated AWS users

S3 bucket permissions were not configured correctly, allowing any authenticated AWS user to delete and write files. Nutanix didn't properly configure one of their S3 buckets permissions and inadvertently allowed any authenticated AWS user to delete and write files. An attacker could post a...

CVE-2020-1010

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service wbengine that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application tha...

CVE-2020-1010

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service wbengine that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service wbengine that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

CVE-2020-1010

Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.

The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to elevate their privileges and delete files in certain parts of the file system.

The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and delete files in certain parts of the file system by running a specially create...

NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for php platform in category web applications Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery Change Admin Password Exploit Author: JEBARAJ Vendor Homepage: https://nukeviet.vn/ Software Link:...

Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2020-32357)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site request forgery vulnerability exists in Subrion CMS version 4.2.1, which can be exploited by a remote...