CVE-2023-36505 WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion

Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a through 3.6.24...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou Yitong Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which originates from vulnerability to arbitrary file deletion attack...

CVE-2024-32162

CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion...

CVE-2024-32162

The content management system CMSeasy version 7.7.7.9 is vulnerable to arbitrary file deletion . This vulnerability arises from the incomplete filtering of special elements , which could allow an attacker to delete files on the system. No specific patch or newer version containing a fix has been ...

PT-2024-24451 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CMSeasy version 7.7.7.9 Description: The issue allows for Arbitrary file deletion. Recommendations: For CMSeasy version 7.7.7.9, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2024-32162

CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion...

CVE-2024-32162: Incomplete Filtering of Special Elements

CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion...

CVE-2024-25911 WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Skymoon Labs MoveTo.This issue affects MoveTo: from n/a through 6.2...

CVE-2024-25911 WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Skymoon Labs MoveTo.This issue affects MoveTo: from n/a through 6.2...

CVE-2024-0549 Relative Path Traversal in mintplex-labs/anything-llm

mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythingllm.db'. The vulnerability stems from insufficient input...

CVE-2024-0549 Relative Path Traversal in mintplex-labs/anything-llm

mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythingllm.db'. The vulnerability stems from insufficient input...

CVE-2024-0549

The CVE-2024-0549 entry concerns mintplex-labs/anything-llm and describes a relative path traversal in deletion requests. The root cause is insufficient input validation/normalization when handling file and folder deletion, allowing an authenticated default-role attacker to delete files (includin...

CVE-2024-0549: Relative Path Traversal

mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythingllm.db'. The vulnerability stems from insufficient input...

CVE-2024-3028: Improper Input Validation

mintplex-labs/anything-llm is vulnerable to improper input validation, allowing attackers to read and delete arbitrary files on the server. By manipulating the 'logofilename' parameter in the 'system-preferences' API endpoint, an attacker can construct requests to read sensitive files or the...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

360 Total Security 安全漏洞

360 Total Security is a suite of computer antivirus software from the Beijing, China-based company Qihoo Technology Limited 360. A security vulnerability exists in 360 Total Security Antivirus version 11.0.0.1061 Windows, which originated from a vulnerability that allows an attacker to delete...

PT-2024-23313 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: The issue is due to improper input validation, allowing attackers to read and delete arbitrary files on the server. By manipulating the logo filename parameter in the...

PT-2024-15649 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: The issue allows unauthorized attackers with a default role account to perform a relative path traversal attack, enabling them to delete files and folders within the...

PT-2024-19156 · Qihoo 360 · 360 Total Security Antivirus

Name of the Vulnerable Software and Affected Versions: 360 Total Security Antivirus versions 11.0.0.1061 and earlier Description: An issue in 360 Total Security Antivirus allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete. This enables attackers to...

Siemens Scalance W1750D Improper Input Validation (CVE-2023-45619)

There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...