13465 matches found
CVE-2022-27277: Improper Limitation of a Pathname to a Restricted Directory
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
Arbitrary file deletion
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
CVE-2021-46419
CVE-2021-46419 affects the Telesquare TLR-2855KS6. The publicly documented vector is an unauthenticated HTTP DELETE request to potentially delete arbitrary files on the device (example PoC targets /cgi-bin/test.cgi), which can destroy system files and render the device inoperable. The issue is ex...
PT-2022-12695
Name of the Vulnerable Software and Affected Versions Telesquare TLR-2855KS6 affected versions not specified Description The issue concerns an unauthorized file deletion vulnerability. It affects Telesquare TLR-2855KS6, allowing the deletion of system files and scripts via the DELETE method...
CVE-2021-46419: Undefined Security Weakness
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts...
Telesquare TLR-2855KS6 安全漏洞
The Telesquare TLR-2855KS6 is an LTE router from Telesquare Korea. A security vulnerability exists in the Telesquare TLR-2855KS6, which stems from an unauthorized file deletion vulnerability that could allow system files and scripts to be deleted via the DELETE method...
CVE-2022-0403
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...
Arbitrary file deletion
jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion...
CVE-2021-39746
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
CVE-2021-39746
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
PT-2022-11024
Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. Us...
CVE-2021-39746: Undefined Security Weakness
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
ALPINE-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
DEBIAN-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...