TencentOS Server 4: fdupes (TSSA-2024:1072)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1072 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2025-198102

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.33.1. This is due to deserialization of untrusted data supplied via CSV file imports in the importsinglepostascsv function within...

CVE-2025-13225

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

EUVD-2025-198130

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225

CVE-2025-13225 affects Tanium TanOS with an arbitrary file deletion vulnerability. Reported by multiple sources (NVD, Red Hat, related advisories) and attributed to Tanium addressing the issue in TanOS. The available documents confirm a TanOS vulnerability enabling arbitrary file deletion, but do...

CVE-2025-13225 Tanium addressed an arbitrary file deletion vulnerability in TanOS.

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225 Tanium addressed an arbitrary file deletion vulnerability in TanOS.

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

CVE-2025-13225

Tanium addressed an arbitrary file deletion vulnerability in TanOS...

PT-2025-47420

Name of the Vulnerable Software and Affected Versions Tanium versions affected versions not specified Description Tanium addressed an arbitrary file deletion issue in TanOS. The vulnerability allows for the deletion of arbitrary files. Recommendations At the moment, there is no information about ...

Tanium TanOS 安全漏洞

Tanium TanOS is a specialized operating system from the American company Tanium. A security vulnerability exists in Tanium TanOS, which stems from the possibility of arbitrary file deletion...

CVE-2025-13282

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

WordPress Data Tables Generator by Supsystic plugin Arbitrary File Deletion Vulnerability

WordPress Data Tables Generator by Supsystic plugin is WordPress plugin for creating interactive tables and charts that support data visualization and dynamic content presentation. WordPress Data Tables Generator by Supsystic plugin has an arbitrary file deletion vulnerability that stems from...

CVE-2025-13282

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

CVE-2025-13282

TenderDocTransfer (Chunghwa Telecom) exposes a combination of flaws: (1) an Absolute Path Traversal within one API that could allow deletion of arbitrary files on the user’s system, and (2) APIs with no CSRF protection, enabling unauthenticated remote attackers to trigger actions via phishing. Th...

CVE-2025-13282 Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

CVE-2025-13282 Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

EUVD-2025-197760

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...

Chunghwa Telecom TenderDocTransfer 跨站请求伪造漏洞

Chunghwa Telecom TenderDocTransfer is an application from Chunghwa Telecom China. Chunghwa Telecom TenderDocTransfer suffers from a cross-site request forgery vulnerability that stems from a lack of CSRF protection in the API and the presence of absolute path traversal, which could lead to an...

PT-2025-47110

Name of the Vulnerable Software and Affected Versions TenderDocTransfer affected versions not specified Description TenderDocTransfer, developed by Chunghwa Telecom, has an issue that allows for arbitrary file deletion. The application establishes a local web server and offers APIs for...