CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

Information disclosure

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

CVE-2021-28670 affects Xerox AltaLink devices (B8045/B8090; C8030/C8035; C8045/C8055; C8070) with Scan To Mailbox before specific firmware revisions (B8045/B8090 < 103.008.030.32000; C8030/C8035 < 103.001.030.32000; C8045/C8055 < 103.002.030.32000; C8070

CVE-2021-28670: Undefined Security Weakness

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-27275: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

CVE-2021-27276: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27272: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

PT-2021-17893

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B8045/B8090 versions before 103.008.030.32000 Xerox AltaLink C8030/C8035 versions before 103.001.030.32000 Xerox AltaLink C8045/C8055 versions before 103.002.030.32000 Xerox AltaLink C8070 versions before 103.003.030.32000...

Xerox AltaLink 安全漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that could allow an unauthorized user to delete arbitrary files from disk via the Scan Mailbox feature. The following products and versio...

PT-2021-17376

Name of the Vulnerable Software and Affected Versions NETGEAR ProSAFE Network Management System version 1.6.0.26 Description This issue allows remote attackers to delete arbitrary files on affected installations, potentially creating a denial-of-service condition. Although authentication is...

Logic Flaw Vulnerability in SongCMS

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A logic flaw vulnerability exists in SongCMS. An attacker can exploit this vulnerability...

PT-2021-17379

Name of the Vulnerable Software and Affected Versions NETGEAR ProSAFE Network Management System version 1.6.0.26 Description This issue allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations. Although authentication is required to exploit th...

PT-2021-17380

Name of the Vulnerable Software and Affected Versions NETGEAR ProSAFE Network Management System version 1.6.0.26 Description This issue allows remote attackers to delete arbitrary files on affected installations, potentially creating a denial-of-service condition. Although authentication is...

NETGEAR ProSAFE Network Management System 路径遍历漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A path traversal vulnerability exists in the NETGEAR ProSAFE Network Management System, which can be exploited by an attacker to delete...

NETGEAR ProSAFE Network Management System 路径遍历漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A path traversal vulnerability exists in the NETGEAR ProSAFE Network Management System that could allow a remote attacker to disclose sensiti...

Logic Flaw Vulnerability in Jinwei Mobile Mall

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A logic flaw vulnerability exists in Jinwei Mobile Mall, which can be exploited by an attacker to delete arbitrary files...

CVE-2021-21343

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on...

WordPress Focusblog premium theme <= 1.97 - Unauthenticated Arbitrary File Upload and Option Deletion

Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Focusblog premium theme versions = 1.97. Solution Update the WordPress Focusblog premium theme to the latest available version at least 2.0.0...

Arbitrary File Deletion

xstream is vulnerable to Arbitrary File Deletion. An attacker may exploit the vulnerability by processing input stream and replace or inject malicious object that results in the deletion of a file on the local host due to the processed stream at unmarshalling time containing type information that...