Eaton Intelligent Power Manager 输入验证错误漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...

CM Download Manager < 2.8.0 - Authenticated Arbitrary File Deletion

The plugin may allow authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...

PT-2021-15432

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue arises from improper input validation in the meta driver srv.js class, specifically with the saveDriverData action using an invalidated driverID. This allows an...

Arbitrary file deletion

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials a...

File Deletion Vulnerability in Super CMS

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

Arbitrary File Deletion Vulnerability in TnCMS (CNVD-2021-30351)

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS has an arbitrary file deletion vulnerability, which can be exploited by an attacker to traverse directories and delete files arbitrarily...

Trend Micro Worry-Free Business Security Remote File Deletion (000281948)

Binary data trendmicrowfbscve-2020-28574.nbin...

Arbitrary File Deletion Vulnerability in TnCMS

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS has an arbitrary file deletion vulnerability, which can be exploited by an attacker to traverse directories and delete files arbitrarily...

CVE-2021-25363

An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files...

CVE-2021-25362

CVE-2021-25362 affects Samsung CertInstaller prior to SMR APR-2021 Release 1. Root cause: improper permission management that lets untrusted apps delete certain local files. Impact varies by metric/version (CVSS3.1: LOCAL, LOW integrity, HIGH availability; CVSS2: LOCAL, PARTIAL integrity, PARTIAL...

PT-2021-16556

Name of the Vulnerable Software and Affected Versions: ActivityManagerService versions prior to SMR APR-2021 Release 1 Description: The issue is related to improper access control in ActivityManagerService, allowing untrusted applications to access running processes and delete some local files...

PT-2021-16555

Name of the Vulnerable Software and Affected Versions: CertInstaller versions prior to SMR APR-2021 Release 1 Description: The issue is related to improper permission management, allowing untrusted applications to delete certain local files. Recommendations: For versions prior to SMR APR-2021...

CVE-2021-25362: Improper Privilege Management

An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files...

Arbitrary file deletion

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Deletion Vulnerability in Catfish CMS

Catfish CMS is an open source and free PHP content management system. An arbitrary file deletion vulnerability exists in the Catfish CMS backend. An attacker can exploit the vulnerability to delete arbitrary files...

CVE-2021-23278

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/mapssrv.js with action removeBackground and server/nodeupgradesrv.js with action removeFirmware. An attacker can send specially...

PT-2021-2525

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

Traffic Management User Interface BIG-IP Arbitrary Command Execution

The vulnerability of the Traffic Management User Interface TMUI of BIG-IP application protection tools is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands, create or delete files remotely...

Traffic Management User Interface BIG-IP Arbitrary Command Execution

The vulnerability of the Traffic Management User Interface TMUI of BIG-IP application protection tools is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands, create or delete files remotely...

CVE-2021-27272

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...