9,000 WordPress Sites Affected by Arbitrary File Upload and Deletion Vulnerabilities in WP User Frontend Pro WordPress Plugin

📢In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. On March 24th, 2025, we received a submission for an Arbitrary File Uplo...

CVE-2025-20259 Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Write Vulnerability

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper access controls on files that are in the local file system. An...

CVE-2025-20259

Cisco ThousandEyes Endpoint Agent for Windows is affected by vulnerabilities in the update process that allow an authenticated, local attacker to delete arbitrary files via a symbolic-link upgrade path. Root cause: improper access controls on local filesystem during the agent upgrade, enabling th...

CVE-2025-20259 Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Write Vulnerability

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper access controls on files that are in the local file system. An...

Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Delete Vulnerabilities

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper access controls on files that are in the local file system. An...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2024-11857

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...

PT-2025-23820 · Cisco · Cisco Thousandeyes Endpoint Agent For Windows

Name of the Vulnerable Software and Affected Versions: Cisco ThousandEyes Endpoint Agent for Windows affected versions not specified Description: The issue is related to improper access controls on files in the local file system of the Cisco ThousandEyes Endpoint Agent for Windows. An...

Cisco ThousandEyes Endpoint Agent 路径遍历漏洞

Cisco ThousandEyes Endpoint Agent is an endpoint agent program from Cisco USA. A path traversal vulnerability exists in Cisco ThousandEyes Endpoint Agent, which can be exploited by an attacker to cause the deletion of an arbitrary file, due to a failure of the program to properly filter for...

CVE-2025-33004

IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction...

WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability

Arbitrary File Deletion Vulnerability discovered by astra.r3verii in WordPress Plugin Welcart e-Commerce versions = 2.11.13...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software...

CVE-2025-37094

CVE-2025-37094 describes a directory traversal vulnerability in HPE StoreOnce Software that could enable arbitrary file deletion. The issue is consistently reported across multiple sources (NVD, Red Hat, CNNVD, CVE listings) as a directory traversal flaw in StoreOnce. Severity metrics vary betwee...

CVE-2024-11857

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...

CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...

CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...

CVE-2024-11857

CVE-2024-11857 concerns Realtek Bluetooth HCI Adaptor driver. A local attacker can create a symbolic link with the name of a target file, causing the driver to delete arbitrary files pointed to by the link, which can then be leveraged for privilege escalation. Documented across multiple feeds (Re...