4873 matches found
CVE-2026-37065
CVE-2026-37065 Veno File Manager Project 4.4.9 es vulnerable a la eliminación arbitraria de archivos. Para explotar la vulnerabilidad, un atacante autenticado con el rol de superadmin puede enviar una solicitud POST especialmente diseñada al endpoint afectado utilizando el parámetro de URL remove...
CVE-2026-12277
CVE-2026-12277 Frontend File Manager 插件 WordPress = 23.6 - 未认证任意文件删除导致 RCE 摘要...
CVE-2020-26259
説明 XStreamは、アンマーシャリング時に、実行プロセスが十分な権限を持っている場合、ローカルホスト上の任意のファイル削除に対して脆弱です。 影響 Xstream \n" + " \n" + " \n" + " 0\n" + " \n" + " \n" + " \n" + " text/plain\n" + " \n" + " C:\Al1ex.txt\n" + " \n" + " \n" + " \n" + " \n" + " 0\n" + " \n" + "...
CVE-2026-24135
CVE-2026-24135: Beliebige Dateilöschung in Gogs durch Wiki-Pfad-Traversal Schweregrad: Hoch CVSS 7.5 Betroffene Software: Gogs Behoben in: 0.13.4, 0.14.0+dev Advisory: GHSA-jp7c-wj6q-3qf2 Patch: gogs/gogs8099 Zusammenfassung Während eines Sicherheits-Audits von Gogs einem beliebten, in Go...
CVE-2026-48866
php // deletephysicalfile — WITH validation $filepath = self::getphysicalfilepath $url, $entryid ; $filepath = applyfilters 'gformfilepathpredeletefile', $filepath, $url ; // NEW: verify path is in uploads if ! GFCommon::isfileinuploads$url GFCommon::logdebugMETHOD . sprintf': Not del...
CVE-2023-6972-Exploit-Arbitrary-File-Deletion
CVE-2023-6972 Dimostrazione di concetto PoC Descrizione Questo repository contiene un exploit Proof of Concept PoC per CVE-2023-6972. La vulnerabilità consente la cancellazione arbitraria di file non autenticata AFD nel plugin Wordpress Backup Migration Nota: Un'analisi tecnica completa, un caso ...
WordPress Shared Files Pro plugin < 1.7.68 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability discovered by Huynh Kien Minh in WordPress Plugin Shared Files Pro versions 1.7.68...
WordPress Shared Files plugin < 1.7.67 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability discovered by Huynh Kien Minh in WordPress Plugin Shared Files versions 1.7.67...
WSO2-2021-1260
WSO2-2021-1260: WSO2 ESB में आर्टिफैक्ट नाम में पाथ ट्रैवर्सल के माध्यम से मनमानी फाइलों का विलोपन आर्टिफैक्ट अपलोड सुविधा में अनसैनिटाइज़्ड उपयोगकर्ता इनपुट के कारण, "artifactName" पैरामीटर में पाथ ट्रैवर्सल का लाभ उठाकर एक मनमानी फ़ाइल विलोपन हमला किया जा सकता है। विक्रेता प्रकटीकरण: इस भेद्यता...
CVE-2026-12513 Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal
The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...
CVE-2026-12513
CVE-2026-12513 affects the Shared Files WordPress plugin (before 1.7.67) and Shared Files Pro (before 1.7.68). The plugins fail to properly sanitize a file path taken from a frontend file submission, and their single-pass traversal filter is bypassable. An unauthenticated user can store a path po...
EUVD-2026-67565
The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...
CVE-2026-54083
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...
CVE-2026-54083 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...
CVE-2026-37065
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=...
CVE-2026-81572
In CodeMeter Runtime from version 8.40 to excluding 8.41a and 9.00 to excluding 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before fi...
CVE-2026-4350
CVE-2026-4350 - Perfmatters WordPress Eliminazione Arbitraria di File Descrizione CVE-2026-4350 è una vulnerabilità di eliminazione arbitraria di file nel plugin WordPress Perfmatters. Dettagli CVE CVE: CVE-2026-4350 Gravità: ALTA CVSS: 8.1 Plugin interessato: Perfmatters Versione interessata: =...
EUVD-2026-66938
Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78275
This Arbitrary File Deletion vulnerability affects the WordPress Fluent Boards Pro plugin in versions ≤ 2.0.11 . The flaw requires an authenticated user with Editor privileges and is scored CVSS 6.8 (Medium) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, indicating a high availability impa...
