CVE-2025-22784

CVE-2025-22784 affects Background Control (WordPress plugin) up to version 1.0.5. Connected data confirm a Cross-Site Request Forgery (CSRF) issue that enables path traversal, leading to potential arbitrary file deletion. The RH/Red Hat entry and Wordfence details corroborate CSRF-related impact ...

CVE-2025-22784 WordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in swedish boy Background Control background-control allows Path Traversal.This issue affects Background Control: from n/a through = 1.0.5...

CVE-2025-22784 WordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in swedish boy Background Control background-control allows Path Traversal.This issue affects Background Control: from n/a through = 1.0.5...

CVE-2025-21101

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion...

CVE-2025-21101

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion...

CVE-2025-21101

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion...

CVE-2025-21101

Dell Display Manager (Windows) prior to version 2.3.2.20 contains a race condition vulnerability during installation. A local attacker could potentially exploit this to delete arbitrary folders or files. Root cause: insufficient synchronization of shared resources during installation. Affected pr...

CVE-2025-21101

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion...

Dell Display Manager 竞争条件问题漏洞

Dell Display Manager is a software for managing and adjusting Dell monitor settings. A competitive condition vulnerability exists in versions of Dell Display Manager prior to 2.3.2.20, which arises because shared resources are not properly synchronized during installation. An attacker could use...

PT-2025-4191 · Dell · Dell Display Manager

Name of the Vulnerable Software and Affected Versions: Dell Display Manager versions prior to 2.3.2.20 Description: A race condition vulnerability exists in the software. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-32115

CVE-2024-32115 is a path-traversal vulnerability in Fortinet FortiManager. The affected product is FortiManager versions 7.4.0–7.4.2 and versions before 7.2.5 . The underlying issue is a relative path traversal (CWE-23) that could allow a privileged attacker to delete files from the underlying fi...

CVE-2024-32115

A relative path traversal vulnerability CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

Fortinet FortiRecorder contains a path traversal flaw (CWE-23) due to improper restriction of pathnames to restricted directories. A privileged attacker could exploit crafted CLI requests to delete files on the underlying filesystem. Affected versions: 7.2.0–7.2.1 and before 7.0.4. Impact include...

PT-2025-25263 · Trend Micro · Trend Micro Password Manager

Name of the Vulnerable Software and Affected Versions: Trend Micro Password Manager Consumer version 5.0.0.1266 and below Description: The issue allows a local attacker to leverage a Link Following Local Privilege Escalation vulnerability to delete files in the context of an administrator when th...