SiYuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in SiYuan version 3.1.18, which stems from the presence of an arbitrary file deletion vulnerability that can be exploited by an attacker to cause arbitrary files to be deleted...

PT-2025-4297 · Unknown +1 · Siyuan Note +1

Name of the Vulnerable Software and Affected Versions: SiYuan Note version 3.1.18 Description: SiYuan Note is self-hosted, open source personal knowledge management software. The software has an arbitrary file deletion vulnerability that exists in the POST /api/history/getDocHistoryContent...

PT-2025-25395

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows for arbitrary directory creation or file deletion. In the find file method of the GitFS class, a path is created using os.path.join with unvalidated input from the tgt env...

PT-2025-49805

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6 Description A directory traversal issue exists in the CacheCleaner component. The recursivelyDelete method does not properly sanitize file paths, potentially allowing attackers to traverse directories and delete...

CVE-2024-13043 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

Huawei HarmonyOS AILife Solution path traversal vulnerability (CNVD-2025-0762234)

Huawei HarmonyOS AILife Solution is a linked operating system for smart devices from the Chinese company Huawei. A path traversal vulnerability exists in Huawei HarmonyOS AILife Solution, which stems from the system failing to properly handle a specific request path. An attacker could use this...

CVE-2023-7263

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.Vulnerability ID:HWPSIRT-2023-53450 This vulnerability has been assigned a CVEID:CVE-2023-7263...

CVE-2023-7263

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.Vulnerability ID:HWPSIRT-2023-53450 This vulnerability has been assigned a CVEID:CVE-2023-7263...

Huawei HarmonyOS AILife Solution 安全漏洞

Huawei HarmonyOS AILife Solution is a linked operating system for smart devices from the Chinese company Huawei. A path traversal vulnerability exists in Huawei HarmonyOS AILife Solution, which stems from the system failing to properly handle a specific request path. An attacker could use this...

ABB Cylon Aspect 3.08.02 (clearProjectConfigurationAjax.php) File Deletion

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The BMS/BAS controller suffers from an arbitrary file deletion...

CVE-2023-7300

Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.Vulnerability ID:HWPSIRT-2023-60613...

CVE-2023-7300

CVE-2023-7300 affects Huawei Home Music System via a path traversal vulnerability. Exploitation could allow unauthorized manipulation of the music host file, including deletion or changing file permissions, as described by HWPSIRT-2023-60613 and the Huawei PSIRT advisory. The available documents ...

CVE-2023-7300

Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.Vulnerability ID:HWPSIRT-2023-60613...

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

PT-2024-35363 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 4.6.1 and prior Dell SupportAssist for Business PCs versions 4.5.0 and prior Description: The software remediation component of Dell SupportAssist contains a symbolic link attack vulnerability. A...

Gogs allows deletion of internal files

Impact Unprivileged user accounts can execute arbitrary commands on the Gogs instance with the privileges of the account specified by RUNUSER in the configuration. It allows attackers to access and alter any users' code hosted on the same instance. Patches Deletion of .git files has been prohibit...

Ivanti Patch SDK Permission Issues Vulnerability

Ivanti Patch SDK is a security tool development kit provided by Ivanti to help organizations automate system vulnerability remediation and patch management. Ivanti Patch SDK suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this...

Ivanti Desktop and Server Management Privilege Issues Vulnerability

Ivanti Desktop and Server Management Ivanti DSM is a multi-platform, unified endpoint management solution from Ivanti Corporation. Ivanti Desktop and Server Management suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this vulnerabilit...