Lucene search
+L

361 matches found

Prion
Prion
added 2022/02/10 11:15 p.m.19 views

Arbitrary file deletion

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

5.5CVSS8.2AI score0.01047EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/10 10:39 p.m.32 views

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

8.4AI score0.01047EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/10 12:00 a.m.10 views

CuppaCMS 路径遍历漏洞

CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...

8.1CVSS5.7AI score0.01047EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/05 11:15 p.m.8 views

CVE-2021-46038

A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlinkchunk.isra, which causes a Denial of Service context-dependent...

5.5CVSS6.7AI score0.00625EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/05 11:15 p.m.6 views

UBUNTU-CVE-2021-46038

A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlinkchunk.isra, which causes a Denial of Service context-dependent...

5.5CVSS6.8AI score0.00625EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/01/05 12:00 a.m.9 views

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. GPAC has a denial of service vulnerability in version 1.0.1, which stems from the existence of a pointer dereference in unlinkchunk.isra, which can be exploited by attackers to perform denial of service attacks...

5.5CVSS5.6AI score0.00625EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/01/05 12:00 a.m.5 views

PT-2022-12519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists in the unlink chunk.isra file, causing a Denial of Service that is context-dependent. Recommendations: For GPAC version 1.0.1, consider restricting access to the unlink...

9.8CVSS7.3AI score0.04615EPSS
SaveExploits98References240
OSV
OSV
added 2021/10/19 4:33 p.m.18 views

UVI-2021-1001724 netfilter: nf_tables: unlink table before deleting it

netfilter: nftables: unlink table before deleting it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/19 4:33 p.m.11 views

GSD-2021-1001724 netfilter: nf_tables: unlink table before deleting it

netfilter: nftables: unlink table before deleting it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

7.2AI score
SaveExploits0
Huntr
Huntr
added 2021/10/02 3:25 a.m.6 views

in pheditor/pheditor

Description This issue allows an attacker to influence calls to the 'unlink' function and delete arbitrary files. https://github.com/pheditor/pheditor is vulnerable to DoS via Arbitrary file deletion. Proof of concept Vuln variable: $POST'path' Snippet: case 'delete': if isset$POST'path' &&...

1.1AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:00 a.m.10 views

The vulnerability of the unlink() function in the content management system CSZ CMS allows a hacker to delete any files they desire.

The vulnerability of the unlink function in the CSZ CMS content management system is related to errors in resource release. Exploiting this vulnerability could allow a remote attacker to delete arbitrary files...

6.8CVSS7.9AI score0.01276EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2021/08/03 12:00 a.m.45 views

CSZ CMS has an unspecified vulnerability

CSZ CMS is a PHP-based open source content management system CMS. version 1.2.9 of CSZ CMS contains a security vulnerability that stems from the vulnerability of CSZ CMS to arbitrary file deletion. This can occur in PHP when the unlink function is called with user input that may affect part or th...

9.1CVSS2AI score0.01276EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/30 2:15 p.m.9 views

CVE-2021-37144

CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization...

9.1CVSS7.3AI score0.01276EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/30 2:15 p.m.22 views

CVE-2021-37144

CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization...

9.1CVSS0.01276EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/30 2:15 p.m.18 views

Arbitrary file deletion

CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization...

6.4CVSS9.1AI score0.01276EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.11 views

CSZ CMS 安全漏洞

CSZ CMS is a PHP-based open source content management system CMS. version 1.2.9 of CSZ CMS contains a security vulnerability that stems from the vulnerability of CSZ CMS to arbitrary file deletion. This can occur in PHP when the unlink function is called with user input that may affect part or th...

9.1CVSS5.7AI score0.01276EPSS
SaveExploits1References1
CVE
CVE
added 2021/07/29 5:25 p.m.74 views

CVE-2021-37144

CSZ CMS 1.2.9 is reported vulnerable to Arbitrary File Deletion. In PHP, the unlink() call can be driven by user input that may affect the target file path without sufficient sanitization, per multiple records. The available documents confirm the affected product/version and the underlying cause,...

9.1CVSS9.2AI score0.01276EPSS
SaveExploits1References1Affected Software1
Packet Storm
Packet Storm
added 2021/07/21 12:00 a.m.384 views

CSZ CMS 1.2.9 Arbitrary File Deletion

Exploit Title: CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion Date: 2021-07-20 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.cszcms.com Software Link: https://sourceforge.net/projects/cszcms/files/latest/download Version: 1.2.9 Tested on: Windows 10,...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/07/21 12:00 a.m.455 views

CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion

Exploit Title: CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion Date: 2021-07-20 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.cszcms.com Software Link: https://sourceforge.net/projects/cszcms/files/latest/download Version: 1.2.9 Tested on: Windows 10,...

5.3AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/12 12:00 a.m.40 views

Security update for redis (important)

openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:2294-1 Rating: important References: 1186722 Cross-References: CVE-2021-32625 CVSS scores: CVE-2021-32625 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update th...

8.8CVSS8.9AI score0.04207EPSS
SaveExploits0References1
Rows per page
Query Builder