Arbitrary file deletion

The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express rende...

Maccms arbitrary file deletion vulnerability

Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...

CVE-2021-38570

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

CVE-2021-38570

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

CVE-2020-21363

An arbitrary file deletion vulnerability exists within Maccms10...

CVE-2020-21363

An arbitrary file deletion vulnerability exists within Maccms10...

Arbitrary file deletion

An arbitrary file deletion vulnerability exists within Maccms10...

CVE-2021-38570

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

CVE-2021-38570

CVE-2021-38570 affects Foxit Reader and Foxit PhantomPDF versions prior to 10.1.4. The issue allows an attacker to delete arbitrary files during uninstallation by abusing a symlink, enabling file deletion on the user’s system. Exploitation details are not provided in the supplied documents. The v...

CVE-2020-21363

Summary: CVE-2020-21363 affects Maccms10, a PHP-based CMS. The connected sources describe an arbitrary file deletion vulnerability caused by inadequate input validation, enabling an attacker to delete arbitrary files on the service via network exposure. No specific exploit details, affected versi...

PT-2021-22219

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 Foxit PhantomPDF versions prior to 10.1.4 Description An issue allows attackers to delete arbitrary files during uninstallation via a symlink. Recommendations For Foxit Reader versions prior to 10.1.4,...

CVE-2020-21363: Externally Controlled Reference to a Resource in Another Sphere

An arbitrary file deletion vulnerability exists within Maccms10...

PT-2021-10619

Name of the Vulnerable Software and Affected Versions: Maccms10 affected versions not specified Description: An arbitrary file deletion vulnerability exists within Maccms10. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2021-38570: Improper Link Resolution Before File Access

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...

Cross-Site Request Forgery (CSRF) in microweber/microweber

✍️ Description Attacker able to delete all file forever from trash if knows the id parameter value of all files that exist in trash with CSRF attack. 🕵️‍♂️ Proof of Concept Here after running PoC.html on Firefox or Safari and click on submit button also can be auto-submit you will see that the file...

CVE-2021-3655

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory...

CVE-2021-36701

In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...

CVE-2021-36701

In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...

Arbitrary file deletion

In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host...

CVE-2021-36701

CVE-2021-36701 affects htmly version 2.8.1. The issue enables arbitrary file deletion on the local host when deleting backup files, potentially allowing a remote attacker to delete arbitrary known files on the host. The available descriptions consistently state the vulnerable component and the im...