Kodi 17.0 Local File Inclusion Exploit

Usage Info msf use auxiliary/scanner/http/koditraversal msf auxiliarykoditraversal show actions ...actions... msf auxiliarykoditraversal set ACTION msf auxiliarykoditraversal show options ...show and set options... msf auxiliarykoditraversal run This module requires Metasploit:...

CVE-2017-5982

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e encoded dot dot slash in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd...

CVE-2017-5982

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e encoded dot dot slash in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd...

CVE-2017-5982

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e encoded dot dot slash in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd...

CVE-2017-5982

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e encoded dot dot slash in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd...

CVE-2017-5982

CVE-2017-5982 : Kodi Chorus2 add-on for Kodi (Chorus2 2.4.2) is affected by a directory traversal vulnerability. An unauthenticated remote attacker can read arbitrary files by supplying a crafted image path containing encoded traversal sequences (for example, image/image%3A//..%252fetc%252fpasswd...

Kodi 17.1 Local File Inclusion

Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux CVE: CVE-2017-5982 Kodi formerly XBMC is a free and...

Kodi 17.0 Local File Inclusion Vulnerability

This module exploits a directory traversal flaw found in Kodi before 17.1. Module Options msf use auxiliary/scanner/http/kodi/traversal msf undefinedtraversal show actions ...actions... msf undefinedtraversal set ACTION msf undefinedtraversal show options ...show and set options... msf...

CVE-2014-5982

The CVE-2014-5982 entry concerns the RunKeeper - GPS Track Run Walk Android app (com.fitnesskeeper.runkeeper.pro) version 4.7 that does not validate X.509 certificates when connecting to SSL servers. This omission enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5665, CVE-2014-5982. Reason: this ID was intended for one issue, but was assigned to two issues by a CNA. Notes: All CVE users should consult CVE-2014-5665 and CVE-2014-5982 to determine which ID is appropriate. All reference...

CVE-2008-5982

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message...

CVE-2008-5982

Affects: BMC PATROL Agent prior to 3.7.30. Vulnerability type: format string handling in logging. Root cause: format string specifiers in an invalid version number are not properly handled when writing log messages, enabling remote code execution. Attack surface: remote attacker to TCP port 3181 ...

CVE-2006-5982

Affected software: SeleniumServer FTP Server 1.0 (and possibly earlier). Vulnerability: passwords are stored in plaintext in the Servers directory, enabling credential disclosure by reading the file. Impact: attacker could obtain user passwords directly from the server files; CVSS indicates high ...