duplicate-CVE-2025-4720-

cve-srms-drop-student-path-traversal CVE-2025-4720dupe Arbitrary File Deletion in SourceCodester SRMS 1.0 Description A path traversal vulnerability exists in the dropstudent.php endpoint of SourceCodester Student Result Management System SRMS 1.0. The application takes user-controlled input from...

CVE-2026-123804 SuperTokens Core: A session created concurrently with account unlink survives the unlink

SuperTokens Core is an open source authentication server. From 7.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, createNewSession can resolve a primary user before unlinkAccounts detaches a login method and then insert the session after unlink has enumerated...

CVE-2026-114630

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factoryreset function in all versions up to, and including, 3.3.8 This makes it possible for unauthenticated attackers to delete...

EUVD-2026-118189

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factoryreset function in all versions up to, and including, 3.3.8 This makes it possible for unauthenticated attackers to delete...

CVE-2026-112908

filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock and AsyncStrictSoftFileLock on POSIX systems create coordination and claim directories without applying the caller’s restrictive lock mode. A permissive umask or inherited...

CVE-2026-120518

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...

CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...

CVE-2026-120518

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 3.1.0 . The vulnerability exists because the bpxp_image_field_update_on_user_activation() function calls unlink() on a path constructed from visitor-supplied signu...

EUVD-2026-115659

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...

CVE-2026-96633

AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted "db" values directly to...

org.webjars.npm:java (5.0.1), org.webjars.npm:js-beautify (2.0.3) +4 more potentially affected by CVE-2026-118773 via org.webjars.npm:glob (>=11.1.0, <=13.0.6)

org.webjars.npm:glob MAVEN version =11.1.0, =6.0.1, =6.1.3 - org.webjars.npm:svgicons2svgfont 15.0.1 Source cves: CVE-2026-118773 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-22112103...

GHSA-6VFX-W7Q3-42GQ AdminNeo SQLite Database-List Drop Arbitrary File Deletion

Summary AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted db values direct...

AdminNeo SQLite Database-List Drop Arbitrary File Deletion

Summary AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted db values direct...

PT-2026-134414

Summary AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted db values direct...

Filelock: StrictSoftFileLock Creates Its Claim Directories Without The Lock Mode, So Another Local User With A Write Bit

"StrictSoftFileLock" and "AsyncStrictSoftFileLock" apply the caller's "mode" to the sentinel the lock file at "" and to both claim files the files whose presence says a process wants or holds the lock. They create the two directories that hold the claims, ".filelock" and ".filelock/claims", with ...

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

StrictSoftFileLock and AsyncStrictSoftFileLock apply the caller's mode to the sentinel the lock file at and to both claim files the files whose presence says a process wants or holds the lock. They create the two directories that hold the claims, .filelock and .filelock/claims, with a bare mkdir...

PT-2026-130562

Name of the Vulnerable Software and Affected Versions filelock versions 3.30.0 through 4.2.0 Description On POSIX systems, the StrictSoftFileLock and AsyncStrictSoftFileLock classes create coordination and claim directories using a bare mkdir call without applying the caller's restrictive lock...

SUSE CVE-2026-98984

In the Linux kernel, the following vulnerability has been resolved: dcache: don't put a mountpoint on a dentry that's being removed rmdir, unlink and rename call dontmount on the victim and then detachmounts with the victim's inode locked. dolockmount takes the inode lock of the mountpoint and...

EUVD-2026-110507

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

CVE-2026-116602

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...