SysmonEoP

SysmonEoP Proof of Concept for arbitrary file delete/write in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerability Vulnerability is in code responsible for ClipboardChange event that can be reached through RPC. Local users can send data to RPC server which will then be written in C:\Sysmon director...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. id: CVE-2021-46424 info: name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete author: gy741 severity:...

OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete

OpenAPI Generator versions 7.5.0 and below are prone to an Arbitrary File Read/Delete vulnerability. Attackers can exploit this vulnerability to read and delete files and folders from an arbitrary, writable directory. id: CVE-2024-35219 info: name: OpenAPI Generator = 7.5.0 - Arbitrary File...

RazerEoP

RazerEoP PoC for arbitrary file delete/move in Razer Synapse 3 Macro module. This module allows user to export created macros to file on disk and file operation is done via razer service that runs as nt authority\system. I tried to report this to razer using their BB program and i got response th...

CVE-2024-2432-PaloAlto-GlobalProtect-EoP

CVE-2024-2432 Palo Alto GlobalProtect EoP On Windows system, it was found that GlobalProtect App version 6.1.1-5 and 6.2.0-89 was vulnerable to arbitrary file delete with elevated privileges by symbolic link attack lead to local privilege escalation on local machine. It was observed that when a...

CVE-2026-126950

The software Zipline version 4.4.0 and below is vulnerable to a path traversal vulnerability. An authenticated attacker can delete arbitrary server files by injecting traversal sequences via the x-zipline-file-extension header. The attack involves uploading a file with a poisoned stored name and ...

CVE-2026-57830

Helix Ultimate Framework — Unauthenticated Path-Traversal Arbitrary File/Folder Read+Delete This is a confirmed DoS + cross-tenant filesystem access vulnerability, NOT RCE. An RCE-escalation theory delete configuration.php to re-expose the Joomla installer was tested live and disproved — see "RCE...

CVE-2024-51747

CVE-2024-51747 Log in with an administrator account and download the database in the system settings Modify projecthasfiles in the sqlite.db database Compress the modified sqlite.db with gzip and upload it. After uploading it to the project and clicking the file to view/download, the attacker can...

CVE-2026-75855

Title Path Traversal in "create database" / "drop database" server commands allows arbitrary file write and delete outside the configured database directory Summary The POST /api/v1/server endpoint's create database and drop database commands use the caller-supplied database name to build a...

CVE-2025-61625

A path traversal vulnerability exists in Fortinet FortiAnalyzer (v7.6.0-7.6.4, v7.4.0-7.4.7, v7.2.0-7.2.11), FortiManager (v7.6.0-7.6.4, v7.4.0-7.4.7, v7.2.0-7.2.11), and FortiManager Cloud (v7.6.0-7.6.4, v7.4.1-7.4.7, v7.2.1-7.2.10). Due to an improper limitation of a pathname to a restricted di...

Arbitrary file write and delete in JSON API

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiManager and FortiAnalyzer API may allow an authenticated attacker whose profile only has read permission to write and delete files from the underlying filesystem via crafted HTTP or HTTPs...

CVE-2026-123807

Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resourceId that can...

CVE-2026-123807

The Signal K Server (v2.0.0–2.33.9) and @signalk/resources-provider (v1.0.0–1.5.2) are vulnerable to a path traversal flaw in the v2 REST resources API. The GET /signalk/v2/api/resources/:resourceType/:resourceId route fails to validate the resourceId parameter, allowing attackers to escape the i...

CVE-2026-123807

Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resourceId that can...

CVE-2026-123807: SignalK, @signalk: Signal K Server is a server application that runs on a central hub in a boat

Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resourceId that can...

CVE-2026-121489

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Juneau. The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource's view, upload or delete settings all off by...

CVE-2026-121489

A Path Traversal vulnerability exists in Apache Juneau through version 9.2.0 . The DirectoryResource microservice fails to restrict request paths to its configured root directory. If an application enables the resource's view, upload, or delete settings (which are off by default), a client can re...

CVE-2026-121489 Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Juneau. The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource's view, upload or delete settings all off by...

PT-2026-137433

Name of the Vulnerable Software and Affected Versions Apache Juneau versions prior to 9.2.1 Description An improper limitation of a pathname to a restricted directory, known as path traversal, exists in the DirectoryResource microservice. This occurs because the microservice fails to keep request...