CVE-2020-25359

An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php by specifying a path in the path parameter and an extension in the ext parameter and delet...

PT-2020-20977

Name of the Vulnerable Software and Affected Versions nothing-js affected versions not specified Description The issue concerns a malicious script within the nothing-js module that attempts to delete all files when the command npm test is run. Recommendations Remove the nothing-js module from you...