Directory traversal

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal...

UBUNTU-CVE-2020-16116

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal...

CVE-2020-16116

CVE-2020-16116 affects KDE Ark prior to version 20.08.0, where kerfuffle/jobs.cpp does not sanitize extraction paths, allowing a crafted archive to write outside the extraction directory via a ../ path traversal. The impact is potential writing of files outside the target directory, with follow-o...

CVE-2020-16116

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal...

CVE-2020-16116

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal...

CVE-2020-16116

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal...

FreeBSD : ark -- directory traversal (d1ef1138-d273-11ea-a757-e0d55e2a8bf9)

KDE Project Security Advisory reports : KDE Project Security AdvisoryTitle:Ark: maliciously crafted archive can install files outside the extraction directory.Risk Rating:ImportantCVE:CVE-2020-16116Versions:ark Date:30 July 2020Overview A maliciously crafted archive with '../' in the file paths...

ark -- directory traversal

KDE Project Security Advisory reports: KDE Project Security Advisory Title: Ark: maliciously crafted archive can install files outside the extraction directory. Risk Rating: Important CVE: CVE-2020-16116 Versions: ark Date: 30 July 2020 Overview A maliciously crafted archive with "../" in the fil...

KDE KMail Information Disclosure Vulnerability

KDE KMail is an e-mail component of Kontact personal information management suite from the KDE community. An information disclosure vulnerability exists in KDE KMail version 19.12.3, which originates from unencrypted POP3 communication by the program and can be exploited by an attacker to obtain...

CVE-2020-15954

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

CVE-2020-15954

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

CVE-2020-15954

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

Code injection

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

CVE-2020-15954

KDE KMail 19.12.3 (aka 5.13.3) is affected by CVE-2020-15954 due to defaulting to unencrypted POP3 communication even when the UI shows encryption. Concrete references in connected docs identify the affected package as KDE components (kdepim-runtime/kmail) and note that the issue was fixed in dis...

CVE-2020-15954

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

CVE-2020-15954

KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use...

kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction

A flaw was found in the KDE Frameworks KConfig prior to version 5.61.0. Certain syntax commands were allowed in .desktop, .directory, and configuration files to allow flexible configurations with the desktop environment. An attacker could add malicious code to a file that a user would...

KDE Trojita Trust Management Issue Vulnerability

KDE Trojita is a lightweight IMAP email client for the KDE community. A trust management issue vulnerability exists in the MSA/SMTP.cpp file in KDE Trojita versions prior to 0.8. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An...

kde.6490.n7.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184702 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

UPDATE: Kali Linux 2020.2 Release

Kali Linux 2020.2 is now available. This is the second release right on time and the last release was Kali Linux 2020.1. This release improves Kali Linux support on the ARM platform. Visually, there are new key packages, icons and KDE Plasma has had a makeover. A short summary is posted in the...