Lucene search
+L

10701 matches found

Cvelist
Cvelist
added 2026/02/09 11:05 p.m.41 views

CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

5.5CVSS0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/09 10:56 p.m.38 views

CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

5.5CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/09 10:56 p.m.43 views

CVE-2025-15318

CVE-2025-15318 concerns an arbitrary file deletion vulnerability in Tanium End-User Notifications Endpoint Tools. The public records indicate Tanium addressed the issue, with referenced advisories (e.g., TAN-2025-017) and CVSS metrics showing LOCAL attacker, high impact on integrity and availabil...

6CVSS5.6AI score0.00175EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/09 10:56 p.m.5 views

CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

5.5CVSS5.6AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/09 10:56 p.m.7 views

CVE-2025-15318

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

5.5CVSS5.6AI score0.00175EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/02/09 10:16 p.m.16 views

CVE-2026-25923

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

9.1CVSS0.00435EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/09 9:56 p.m.14 views

CVE-2026-25923 Phar Deserialization leading to Arbitrary File Deletion in my little forum

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

8.7CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/09 9:56 p.m.42 views

CVE-2026-25923 Phar Deserialization leading to Arbitrary File Deletion in my little forum

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

8.7CVSS0.00435EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/02/09 9:56 p.m.5 views

CVE-2026-25923 Phar Deserialization leading to Arbitrary File Deletion in my little forum

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

8.7CVSS5.8AI score0.00435EPSS
SaveExploits1References2
CVE
CVE
added 2026/02/09 9:56 p.m.44 views

CVE-2026-25923

The CVE describes a vulnerability in My Little Forum (PHP/MySQL) where the URL validation fails to filter the phar:// protocol before 20260208.1. This allows an attacker to upload a malicious Phar Polyglot disguised as a JPEG, trigger Phar deserialization via BBCode [img] processing, and leverage...

9.1CVSS5.8AI score0.00435EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/09 9:56 p.m.19 views

CVE-2026-25923

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to 20260208.1, the application fails to filter the phar:// protocol in URL validation, allowing attackers to upload a malicious Phar Polyglot file disguised as JPEG via the image...

8.7CVSS5.8AI score0.00435EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2026/02/09 7:08 a.m.14 views

WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Upload Files Anywhere versions = 2.8...

8.6CVSS5.5AI score0.00371EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.15 views

PT-2026-7189

Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS...

5.5CVSS5.6AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.11 views

PT-2026-7190

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

5.5CVSS5.6AI score0.00336EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/09 12:00 a.m.17 views

Tanium end-user-cx 安全漏洞

Tanium end-user-cx is a terminal tool extension provided by the American company Tanium. There is a security vulnerability in Tanium end-user-cx, which stems from the ability to delete arbitrary files...

6CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.19 views

PT-2026-7191

Name of the Vulnerable Software and Affected Versions Tanium Endpoint Configuration Toolset Solution affected versions not specified Tanium End-User Notifications Endpoint Tools affected versions not specified Description Tanium addressed a flaw that allows for arbitrary file deletion...

5.5CVSS5.6AI score0.00175EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/09 12:00 a.m.21 views

my little forum 代码问题漏洞

My Little Forum is an open-source online forum system based on PHP and MySQL. Versions prior to 20260208.1 had code vulnerabilities; these vulnerabilities stemmed from URL validation not filtering the phar protocol, which could lead to arbitrary file deletion...

9.1CVSS6AI score0.00435EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/02/06 6:52 p.m.9 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the synchronization process when a repository file is deleted prior to synchronization. An attacker can cause the application to crash by deleting a repository file before synchronization as an authenticated...

7.1CVSS5.6AI score0.0035EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/06 6:16 p.m.7 views

GHSA-JP7C-WJ6Q-3QF2 Gogs vulnerable to arbitrary file deletion via Path Traversal in wiki page update

Summary A Path Traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitrary files on the server by manipulating the oldtitle parameter in the wiki editing form. Vulnerability...

7.2CVSS5.7AI score0.00681EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/02/06 6:16 p.m.16 views

Gogs vulnerable to arbitrary file deletion via Path Traversal in wiki page update

Summary A Path Traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitrary files on the server by manipulating the oldtitle parameter in the wiki editing form. Vulnerability...

8.1CVSS5.7AI score0.00681EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder