CVE-2020-1010

Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.

The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to elevate their privileges and delete files in certain parts of the file system.

The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and delete files in certain parts of the file system by running a specially create...

NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for php platform in category web applications Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery Change Admin Password Exploit Author: JEBARAJ Vendor Homepage: https://nukeviet.vn/ Software Link:...

Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2020-32357)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site request forgery vulnerability exists in Subrion CMS version 4.2.1, which can be exploited by a remote...

WordPress Simple File List plugin <= 4.2.7 - Authenticated Arbitrary File Deletion vulnerability

Authenticated Arbitrary File Deletion vulnerability discovered by Christian Niel Angel in WordPress Simple File List plugin versions = 4.2.7. Solution Update the WordPress Simple File List plugin to the latest available version at least 4.2.8...

Simple File List < 4.2.8 - Authenticated Arbitrary File Deletion

The Simple File List WordPress plugin was affected by an Authenticated Arbitrary File Deletion security vulnerability...

Advantech WebAccessNode suffers from an arbitrary path file deletion vulnerability (CNVD-2020-30159)

Advantech WebAccessNode is a fully Internet Explorer-based HMI/SCADA monitoring software. Advantech WebAccessNode has an arbitrary path file deletion vulnerability that can be exploited by an attacker to delete arbitrary path files on the system...

File Deletion Vulnerability in Extreme Cms

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS file deletion vulnerability , an attacker can exploit the vulnerability to delete any file on the server...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2020-31588)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS version 7.1, version 8.0, and version 8.1 prior to 8.1.14. An attacker could exploit the vulnerability to execute code with ro...

Palo Alto Networks PAN-OS Arbitrary File Deletion Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An arbitrary file deletion vulnerability exists in the command processing in Palo Alto Networks PAN-OS, which can be exploited by an attacker to delete arbitrary system files, affecting...

CVE-2020-2003

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....

Xxe

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....

CVE-2020-2008

CVE-2020-2008 affects Palo Alto Networks PAN-OS across versions: PAN-OS 7.1 and 8.0, and 8.1 prior to 8.1.14. The vulnerability is an OS command injection and external control of filename in the management interface, allowing authenticated administrators to run code with root privileges or delete...

CVE-2020-2003 PAN-OS: Authenticated administrator can delete arbitrary system file

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Simple File List plugin (versions

PAN-OS: OS command injection or arbitrary file deletion vulnerability

An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system files and impact the system's integrity or cause a denial of service condition. Work around: This...

PAN-OS: Authenticated administrator can delete arbitrary system file

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....