CVE-2020-22761: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-12130

The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function...

CVE-2020-12130

CVE-2020-12130 affects the AirDisk Pro app for iOS (version 5.5.3). The vulnerability is a cross-site scripting (XSS) flaw that can be triggered through the deleteFile parameter of the Delete function, as stated across multiple sources. The exact root cause is described as insufficient validation...

CVE-2020-12130: Improper Neutralization of Input During Web Page Generation

The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function...

PT-2019-15195

Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue allows for Directory Traversal, which can be exploited for file deletion. This is achieved through a specific substring in the "web/polygon/problem/deletefile" API endpoint,...

CVE-2019-17537: Improper Limitation of a Pathname to a Restricted Directory

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring...

DoorGets Arbitrary File Deletion Vulnerability

DoorGets is a free and open source content management system. An arbitrary file deletion vulnerability exists in /fileman/php/deletefile.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to delete arbitrary files...

CVE-2019-11612

doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files...

Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion Exploit

Exploit for windows platform in category local exploits Windows: DSSVC CheckFilePermission Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m...

Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion

Windows: DSSVC CheckFilePermission Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m reporting in the same service. While I’ve tried to ensure...

Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion

Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion Windows: DSSVC CheckFilePermission Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple...

CVE-2015-2295

Cross-site request forgery CSRF vulnerability in systemfirmwarerestorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter...

CVE-2015-2295

PfSense WebGUI (pfSense before 2.2.1) is affected by CVE-2015-2295 due to CSRF in system_firmware_restorefullbackup.php, enabling an attacker to hijack admin authentication and issue deletefile requests that can remove arbitrary files with root privileges. Several connected advisories corroborate...

CVE-2015-2295: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in systemfirmwarerestorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter...

FathFTP 1.8 - (DeleteFile Method) ActiveX Buffer Overflow (SEH)

No description provided by source. html object classid='clsid:62A989CE-D39A-11D5-86F0-B9C370762176' id='target'/object script language='vbscript' ' Exploit Title: FathFTP 1.8 SEH DeleteFile ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1....

FathFTP v1.8 (DeleteFile Method) ActiveX Buffer Overflow (SEH)

Exploit for windows platform in category remote exploits ============================================================== FathFTP v1.8 DeleteFile Method ActiveX Buffer Overflow SEH ============================================================== ' Exploit Title: FathFTP 1.8 SEH DeleteFile ActiveX...

FathFTP 1.8 - DeleteFile Method ActiveX Buffer Overflow (SEH)

FathFTP 1.8 - DeleteFile Method ActiveX Buffer Overflow SEH ' Exploit Title: FathFTP 1.8 SEH DeleteFile ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7 : http://www.exploit-db.com/exploits/14269/ Thanks Blake ' RasIsConnected 1.8 :...

FathFTP 1.8 - 'DeleteFile Method' ActiveX Buffer Overflow (SEH)

' Exploit Title: FathFTP 1.8 SEH DeleteFile ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7 : http://www.exploit-db.com/exploits/14269/ Thanks Blake ' RasIsConnected 1.8 : http://www.exploit-db.com/exploits/14539/ ' Tested on: Windows X...

GE Fanuc Real Time Information Portal 2.6 writeFile() API Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================== GE Fanuc Real Time Information Portal 2.6 writeFile API Exploit meta ======================================================================== $Id: hookedonfanucs.rb Th...

CVE-2007-1682: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...