CVE-2021-32000 clone-master-clean-up: dangerous file system operations

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

CVE-2021-32000: Improper Link Resolution Before File Access

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

Multiple vulnerabilities in NCH Quorum (CNVD-2021-55904)

NCH Quorum is a teleconference server software. It can turn any computer into a teleconference server. The caller dials into the server to participate in a conference call. A directory traversal and arbitrary file deletion vulnerability exists in NCH Quorum, which can be exploited by an attacker ...

XOS Shop 1.0.9 Arbitrary File Deletion

Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Date: 2021-07-25 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on:...

Multiple vulnerabilities exist in NCH Quorum (CNVD-2021-55905)

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...

NCH IVM Attendant Directory Traversal Vulnerability (CNVD-2021-55908)

NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which could be exploited by an attacker to delete files by traversing the path with the logdeleteselected check0 parameter...

NCH Quorum has multiple vulnerabilities

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. NCH Quorum is vulnerable to directory traversal and arbitrary file deletion, which can be exploited to view or delete any file on a remote system via path traversal in a separate function...

XOS Shop 1.0.9 - (Multiple) Arbitrary File Deletion (Authenticated) Vulnerability

Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on: Windows 10, XAMP...

XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)

Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Date: 2021-07-25 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on:...

CVE-2021-37447

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...

CVE-2021-37443

NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...

CVE-2021-37447

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...

CVE-2021-37441

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...

CVE-2021-37441

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...

CVE-2021-37441

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...

Path traversal

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...

CVE-2021-37447

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...

Directory traversal

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...

CVE-2021-37443

NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...

CVE-2021-37441

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring...