KodExplorer 4.49 - CSRF to Arbitrary File Upload

Exploit Title: KodExplorer | | | | | | | / | | |\ \ | /| | | //|/ //\ ./||/|| || | | // | | || KODExplorer = v4.49 Remote Code Executon Coded by MrEmpy ''' def httpd: port = 8080 httpddir = os.path.joinos.path.dirnamefile, 'http' os.chdirhttpddir Handler =...

KodExplorer 4.49 - CSRF to Arbitrary File Upload Exploit

Exploit Title: KodExplorer ?php s...

CVE-2022-4944

KodExplorer (kalcaddle) up to version 4.49 contains a cross-site request forgery (CSRF) vulnerability. The issue affects an unknown part of the software and can be triggered remotely; exploits have been publicly disclosed. Upgrading to version 4.50 addresses the issue. Multiple connected sources ...

Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer

「💥」CVE-2022-4944 Description A vulnerability, which was c...

Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer

「💥」CVE-2022-4944 Description A vulnerability, which was c...

KODExplorer 4.49 Cross Site Request Forgery / Shell Upload

Exploit Title: KodExplorer ' path = '/data/User/admin/home/' targetpath = input' Target KODExplorer path ex /var/www...

Security Bulletin: Cross-Site Scripting Security Vulnerability in IBM Maximo Asset Management (CVE-2015-4944)

Summary A cross-site scripting vulnerability in Maximo Asset Management could allow an attacker to execute script in a victim's Web browser, within the security context of the hosting Web site. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry...

Ubuntu: Security Advisory (USN-4944-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : MariaDB regression (USN-4944-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4944-2 advisory. USN-4944-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. Tenable has extracted the preceding description block directly...

Debian: Security Advisory (DSA-4944-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : MariaDB vulnerabilities (USN-4944-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4944-1 advisory. This update fixed multiple vulnerabilities in MariaDB. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.48. Ubuntu 20.04 LTS has been updated to...

CVE-2020-4944

IBM UrbanCode Deploy UCD 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. IBM X-Force ID: 191944...

CVE-2020-4944

CVE-2020-4944 affects IBM UrbanCode Deploy (UCD) versions 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, 7.1.1.2. The issue is that keystore passwords are stored in plain text after a manual edit, allowing a local user to read them. The IBM security bulletin confirms this behavior...

RHEL 8 : thunderbird (RHSA-2020:4944)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4944 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.4.0. Security Fixes: Mozilla:...

CVE-2019-4944

...

CVE-2018-4944

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4944

CVE-2018-4944 affects Adobe Flash Player: a type-confusion vulnerability in versions 29.0.0.140 and earlier that could allow arbitrary code execution in the current user context. Public advisories reference APSB18-16; mitigation is to upgrade to a non‑vulnerable version (e.g., 29.0.0.171 or newer...

RHEL 6 : flash-plugin (RHSA-2018:1367)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1367 advisory. - flash-plugin: Arbitrary Code Execution vulnerability APSB18-16 CVE-2018-4944 Note that Nessus has not tested for this issue but has instead relied...