PT-2026-68569

Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...

PT-2026-68568

Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...

CVE-2024-46446

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover...

CVE-2024-46446

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover...

CVE-2024-46446: Improper Limitation of a Pathname to a Restricted Directory

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover...

CVE-2024-46446

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover...

CVE-2024-46446

CVE-2024-46446 affects Mecha CMS 3.0.0. A directory traversal vulnerability allows an attacker to craft cookies and URIs that bypass user identity checks, then pass parameters via POST to perform arbitrary file deletion or take over the website. The issue is rooted in inadequate validation of inp...

PT-2023-2054

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to an authenticated path traversal vulnerability in the ArubaOS web-based management interface. This vulnerability allows for the deletion of arbitrary files in the...

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

PT-2022-9291

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Collector dc.exe version 15.0.0.21320 and prior Description A Missing Authentication for Critical Function issue exists due to lack of validation of network messages, which could cause deletion of...

Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management

Summary Vulnerabilities in XStream, such as execution of arbitrary code, server-side request forgery, denial of service, bypassing security restrictions, and deletion of arbitrary files, may affect IBM Spectrum Copy Data Management. Vulnerability Details CVEID: CVE-2020-26217 DESCRIPTION: XStream...

Design/Logic Flaw

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...