13401 matches found
CVE-2023-22773
CVE-2023-22773 involves an authenticated path-traversal vulnerability in ArubaOS CLI. Exploitation enables deletion of arbitrary files on the underlying OS. Affected product: ArubaOS (CLI path likely used by Mobility Controllers/Gateways). Root cause: path-traversal in CLI handling allows access ...
CVE-2023-22773 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.
Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...
CVE-2023-22772 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion
An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...
CVE-2023-22772 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion
An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...
CVE-2023-22773: Improper Limitation of a Pathname to a Restricted Directory
Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...
CVE-2023-22774: Improper Limitation of a Pathname to a Restricted Directory
Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
Razer Central 后置链接漏洞
Razer Central is the peripheral control center for Razer USA. A security vulnerability exists in versions prior to Razer Central v7.8.0.381, which stems from an arbitrary file deletion vulnerability found when working with files in the account directory...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
PT-2023-5216 · N Able · N-Able Take Control Agent
Name of the Vulnerable Software and Affected Versions: N-able Take Control Agent versions 7.0.41.1141 through 7.0.42 Description: The issue is related to a Time-of-Check to Time-of-Use TOCTOU race condition in the BASupSrvcUpdater.exe service, which can be exploited via a pseudo-symlink at...
Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)
The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It was possible to trick a privileged process doing a recursive delete in an attacker controlled directory into deleting privileged files, on all operating systems. F...
Exploit for Path Traversal in Joomla Joomla\!
Code Conversion to Python 3 This code is taken from Joomla! C...
WordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File Deletion
Software All In One Favicon Type Plugin Vulnerable versions = 4.7 Fixed in 4.8 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-24416 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID b9929b1d7eae Credits Mika Required privilege...
Arbitrary file deletion
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-0862
The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects...
NetModule NSRW 路径遍历漏洞
NetModule NSRW is a series of router software from NetModule, Inc. A security vulnerability exists in NetModule NSRW that stems from the presence of a path traversal vulnerability, which could lead to arbitrary file uploads and deletions, and could be exploited by an authenticated attacker to...
CVE-2023-0862: Improper Limitation of a Pathname to a Restricted Directory
The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects...
CVE-2023-0102
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...
