PT-2025-23457 · Realtek · Bluetooth Hci Adaptor

Name of the Vulnerable Software and Affected Versions: Bluetooth HCI Adaptor from Realtek affected versions not specified Description: The issue allows local attackers with regular privileges to create a symbolic link with the same name as a specific file, causing the product to delete arbitrary...

Realtek Bluetooth HCI Adaptor 后置链接漏洞

Realtek Bluetooth HCI Adaptor is a Bluetooth driver from China-based Realtek Semiconductor Realtek. A backlink vulnerability exists in Realtek Bluetooth HCI Adaptor, which stems from a link-following issue that could lead to arbitrary file deletion and elevation of privilege...

Hewlett Packard Enterprise StoreOnce VSA deletePackages Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Hewlett Packard Enterprise StoreOnce VSA. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Hewlett Packard Enterprise StoreOnce 路径遍历漏洞

Hewlett Packard Enterprise StoreOnce is a cloud backup data protection system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise StoreOnce that originates from directory traversal and could lead to arbitrary file deletion...

HPESBST04847 rev.2 - HPE StoreOnce Software, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Deletion, Authentication Bypass, Code Execution, Directory Traversal, Disclosure of Information, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce G4/4+ Systems - Prior to v4.3.11 CVSS...

CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...

CVE-2025-33004

IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction...

CVE-2025-33004 IBM Planning Analytics Local path traversal

IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction...

CVE-2025-33004

CVE-2025-33004 affects IBM Planning Analytics Local (2.0 and 2.1). The vulnerability is a path traversal flaw caused by improper pathname restriction that could let a privileged user delete files from directories. Connected sources confirm affected versions 2.0–2.1 and cite the impact as file del...

CVE-2025-33004 IBM Planning Analytics Local path traversal

IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction...

CVE-2025-48480

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an authorized user with the administrator role or with the privilege User::PERMEDITUSERS can create a user, specifying the path to the user's avatar ../.htaccess during creation, and then delete the user's...

IBM Planning Analytics Local 路径遍历漏洞

IBM Planning Analytics Local is a web-based local architecture from International Business Machines IBM. A path traversal vulnerability exists in IBM Planning Analytics Local versions 2.0 and 2.1, which stems from improperly restricted pathnames and could result in the deletion of files...

CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...

CVE-2025-2503

Vulnerability scope: Lenovo PC Manager contains an improper permission handling vulnerability that could allow a local attacker to perform arbitrary file deletions as an elevated user. The issue is local in scope with low attack complexity and requires low privileges, and it impacts integrity and...

CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...

CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...

WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability

Arbitrary File Deletion Vulnerability discovered by timomangcut in WordPress Plugin WP Pipes versions = 1.4.2...

CVE-2025-48488

FreeScout (PHP/Laravel) before version 1.8.180 is affected by a stored XSS vulnerability that arises when an attacker deletes the .htaccess file and uploads an HTML file containing JavaScript to the server. The issue is patched in version 1.8.180. Remediation: upgrade to 1.8.180 or later. Workaro...

CVE-2025-48480

CVE-2025-48480 affects FreeScout prior to version 1.8.180. An authorized user with the administrator role or with the privilege User::PERM_EDIT_USERS can create a user and specify the avatar path as ../.htaccess, then delete the avatar, causing deletion of the .htaccess file in the folder /storag...

CVE-2025-48480 FreeScout Has Business Logic Errors

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an authorized user with the administrator role or with the privilege User::PERMEDITUSERS can create a user, specifying the path to the user's avatar ../.htaccess during creation, and then delete the user's...