CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

CVE-2024-32115 is a path-traversal vulnerability in Fortinet FortiManager. The affected product is FortiManager versions 7.4.0–7.4.2 and versions before 7.2.5 . The underlying issue is a relative path traversal (CWE-23) that could allow a privileged attacker to delete files from the underlying fi...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

Fortinet FortiRecorder contains a path traversal flaw (CWE-23) due to improper restriction of pathnames to restricted directories. A privileged attacker could exploit crafted CLI requests to delete files on the underlying filesystem. Affected versions: 7.2.0–7.2.1 and before 7.0.4. Impact include...

PT-2025-25263 · Trend Micro · Trend Micro Password Manager

Name of the Vulnerable Software and Affected Versions: Trend Micro Password Manager Consumer version 5.0.0.1266 and below Description: The issue allows a local attacker to leverage a Link Following Local Privilege Escalation vulnerability to delete files in the context of an administrator when th...

Fortinet FortiManager 安全漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

Arbitrary file delete on firmware import image feature

...

Arbitrary file deletion in administrative interface

...

Fortinet FortiRecorder 路径遍历漏洞

Fortinet FortiRecorder is a Web-based network video recorder management system from Fortinet. A path traversal vulnerability exists in Fortinet FortiRecorder that stems from incorrectly restricting path names to restricted directories, resulting in a path traversal vulnerability. A privileged...

PT-2025-1186

Name of the Vulnerable Software and Affected Versions FortiManager versions 7.6.0 through 7.6.1 FortiManager versions 7.4.1 through 7.4.3 FortiOS versions 7.6.0 FortiOS versions 7.4.0 through 7.4.4 FortiOS versions 7.2.5 through 7.2.9 FortiOS versions 7.0.0 through 7.0.15 FortiOS versions 6.4.0...

WordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability

CSRF to Arbitrary File Deletion vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Background Control versions = 1.0.5...

Arbitrary File Deletion

github.com/siyuan-note/siyuan is vulnerable to Arbitrary file deletion. The vulnerability is due to a lack of proper safeguards in the POST /api/history/getDocHistoryContent endpoint, which allows maliciously crafted payloads to trigger the deletion of arbitrary files on the server...

CVE-2024-12877

CVE-2024-12877 affects GiveWP – Donation Plugin and Fundraising Platform for WordPress (versions up to and including 3.19.2). Root cause: unsafe deserialization of untrusted input from donation forms, enabling PHP Object Injection; the presence of a POP chain can allow deletion of arbitrary files...

CVE-2025-0105

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem...

CVE-2025-0105

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem...

CVE-2024-12627

The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the captureemail AJAX action. This...