CVE-2025-14829

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

CVE-2025-14829 e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

CVE-2025-14829 e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

PT-2026-2576

CVE-2025-69990 phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove file.php. The parameter file can cause any file to be deleted. https://t.co/0eX7xcTYaJ...

CVE-2025-69990

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in removefile.php. The parameter file can cause any file to be deleted...

PT-2026-2453

Name of the Vulnerable Software and Affected Versions AOS-8 operating system affected versions not specified Description A flaw exists in a system function of mobility conductors running the AOS-8 operating system that allows for arbitrary file deletion. A remote attacker could exploit this to...

Fortinet FortiVoice 路径遍历漏洞

Fortinet FortiVoice is a Unified Communications and Collaboration-as-a-Service from Fortinet, Inc. A path traversal vulnerability exists in Fortinet FortiVoice versions 7.2.0 through 7.2.2 and 7.0.0 through 7.0.7, which stems from an improperly restricted path traversal and could lead to a...

HPE AOS 安全漏洞

HPE AOS is an operating system from the US-based HPE. A security vulnerability exists in HPE AOS that stems from an arbitrary file deletion vulnerability in a system function that could lead to a denial of service...

PT-2026-2350

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

HPE AOS 安全漏洞

HPE AOS is an operating system from the US-based HPE. A security vulnerability exists in HPE AOS versions 10 and 8 that stems from an arbitrary file deletion vulnerability in the command line interface...

CVE-2025-69990

CVE-2025-69990 affects the phpgurukul News Portal Project, version V4.1. The issue is an Arbitrary File Deletion vulnerability in remove_file.php where the input parameter file can be exploited to cause deletion of arbitrary files. The provided metrics indicate a critical impact (I and A) with hi...

PT-2026-2461

Name of the Vulnerable Software and Affected Versions mobility conductors versions AOS-8 and AOS-10 Description An arbitrary file deletion issue exists in the command-line interface of mobility conductors. A remote attacker with authentication could delete arbitrary files within the affected...

CVE-2025-69990

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in removefile.php. The parameter file can cause any file to be deleted...

phpgurukul News Portal Project 安全漏洞

PHPGurukul News Portal Project is a news portal project by PHPGurukul Inc. A security vulnerability exists in version V4.1 of phpgurukul News Portal Project, which stems from improper manipulation of the parameter file in the removefile.php file, which could lead to the removal of arbitrary files...

PT-2026-2473

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

WordPress plugin E-xact 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2026-22783

CVE-2026-22783 affects the Iris DFIR-IRIS datastore file management system prior to version 2.4.24 . A vulnerability arises from mass assignment of the field file_local_name combined with trusting the path in the delete operation, enabling authenticated users to delete arbitrary filesystem paths....

CVE-2026-22783 Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the filelocalname field combined with path trust in the delete operation...

CVE-2025-15035 Arbitrary File Deletion Vulnerability in TP-Link Archer AXE75

Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 vpn modules allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.This issue affects Archer AXE75 v1.6: ≤...

CVE-2025-15035

CVE-2025-15035 affects TP-Link Archer AXE75 v1.6 (≤ build 20250107). The vulnerability is due to improper input validation in the VPN modules, enabling an authenticated adjacent attacker to delete arbitrary server files, risking loss of critical system files and potential service disruption. Affe...