DEBIAN-CVE-2019-15666

An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in xfrmpolicyunlink, which will cause denial of service, because verifynewpolicyinfo in net/xfrm/xfrmuser.c mishandles directory validation...

Design/Logic Flaw

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

CVE-2018-20924

CVE-2018-20924 affects cPanel before 70.0.23, allowing arbitrary file-read and file-unlink via WHM style uploads (SEC-378). The issue concerns the vends/product: cPanel; vulnerable component/behavior: file access operations triggered by WHM uploads; root cause not explicitly detailed in the provi...

CVE-2018-20897

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

CVE-2018-20897

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

Design/Logic Flaw

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

CVE-2018-20897

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

CVE-2018-20897

CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...

PT-2019-10327

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows arbitrary file-unlink operations via the cPAddons moderation system. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the iss...

CVE-2018-20897: Improper Input Validation

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

PT-2019-10357

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for arbitrary file-read and file-unlink operations through WHM style uploads. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the iss...

CVE-2018-20924: Improper Authentication

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

PT-2019-4140

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.19 Description The issue is related to an out-of-bounds array access in the xfrm policy unlink component of the Linux kernel, which can cause a denial of service. This is due to the verify newpolicy info...

OpenEMR 5.0.1.3 File Read / Write / Delete

Exploit Title: OpenEMR 5.0.1.3 - Arbitrary File Actions Date: 2018-08-14 Exploit Author: Joshua Fam Twitter : @Insecurity Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/v5013.tar.gz Version: 5.0.1.3 Tested on: Ubuntu LAMP, OpenEMR Version...

PT-2018-11457

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.9.7 Description The issue allows Author users to execute arbitrary code by leveraging directory traversal in the "wp-admin/post.php" endpoint, specifically the thumb parameter, which is passed to the PHP unlink...

WordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion

...

cve

Cms Made Simple Multiple Vulnerability General descripti...

WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Plugin Woocommerce CSV importer 3.3.6 – RCE – Unlink Date: 08/04/2018 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/woocommerce-csvimport/ Software Link:...

Buddypress Xprofile Custom Fields Type 2.6.3 - Remote Code Execution

Exploit Title: Plugin Buddypress Xprofile Custom Fields Type 2.6.3 RCE – Unlink Date: 08/04/2018 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/buddypress-xprofile-custom-fields-type/ Software Link: https://wordpress.org/plugins/buddypress-xprofile-custom-fields-type/...

WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution

WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution Exploit Title: Plugin Woocommerce CSV importer 3.3.6 – RCE – Unlink Date: 08/04/2018 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/woocommerce-csvimport/ Software Link:...