83 matches found
CVE-2021-42917
CVE-2021-42917 = Buffer overflow in Kodi xbmc up to 19.0, caused by improper length handling of values passed to istream, leading to denial of service. Public details confirm affected Kodi versions and root cause; Debian LTS advisory notes a fix in Kodi package 2:17.6+dfsg1-4+deb10u1. Other repor...
PT-2021-23698 · Kodi +1 · Kodi +1
Name of the Vulnerable Software and Affected Versions: Kodi xbmc versions up to 19.0 Description: The issue is related to a buffer overflow vulnerability, which allows attackers to cause a denial of service due to the improper length of values passed to istream. Recommendations: For Kodi xbmc...
xbmc-center.nl Cross Site Scripting vulnerability OBB-1251043
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2012-10024
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/xbmctraversal.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2018-8831
Kodi 17.6 and earlier web interface are vulnerable to a persistent XSS via playlists, allowing arbitrary HTML/script execution in the victim’s browser. Affected: Kodi/XBMC playlist handling in the web interface. Root cause: Persistent XSS in playlist processing. Impact: arbitrary script execution...
Debian DLA-1243-1 : xbmc security update
The Check Point Research Team discovered that the XBMC media center allows arbitrary file write when a malicious subtitle file is downloaded in zip format. This update requires the new dependency libboost-regex1.49. For Debian 7 'Wheezy', these problems have been fixed in version...
[SECURITY] [DLA 1243-1] xbmc security update
Package : xbmc Version : 2:11.0git20120510.82388d5-1+deb7u1 CVE ID : CVE-2017-8314 Debian Bug : 863230 The Check Point Research Team discovered that the XBMC media center allows arbitrary file write when a malicious subtitle file is downloaded in zip format. This update requires the new dependenc...
Debian: Security Advisory (DLA-1243-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-1243-1 xbmc - security update
Bulletin has no description...
The media player can lead to millions of systems suffer from subtitles attack-vulnerability warning-the black bar safety net
Experts pointed out that, as long as the attacker can make the target user in which a vulnerable media player to open a malicious subtitle file will be able to fully control the device. For automatically from the Internet to get the caption of the application, without any user interaction it can...
Kodi 17.1 Arbitrary File Disclosure
Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux Kodi formerly XBMC is a free and open-source media...
Kodi 17.1 - Arbitrary File Disclosure
Kodi 17.1 - Arbitrary File Disclosure Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux Kodi formerly...
XBMC remote control - Corrupted files, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application XBMC remote control published at the 'play' market has multiple vulnerabilities...
XBMC/KODI ADDONS EXPLORER - BSD license, Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application XBMC/KODI ADDONS EXPLORER published at the 'play' market has multiple vulnerabilities...
Updated xbmc packages fix CVE-2015-3885
Updated xbmc package fixes security vulnerability: The dcraw tool suffers from an integer overflow condition which lead to a buffer overflow. The vulnerability concerns the 'len' variable, parsed without validation from opened images, used in the ljpegstart function. A maliciously crafted raw ima...
MGASA-2015-0230 Updated xbmc packages fix CVE-2015-3885
Updated xbmc package fixes security vulnerability: The dcraw tool suffers from an integer overflow condition which lead to a buffer overflow. The vulnerability concerns the 'len' variable, parsed without validation from opened images, used in the ljpegstart function. A maliciously crafted raw ima...
SEC Consult SA-20150113-2 :: Cross-Site Request Forgery in XBMC / Kodi
SEC Consult Vulnerability Lab Security Advisory 20150113-2 ======================================================================= title: Cross-Site Request Forgery product: Kodi/XBMC vulnerable version: XBMC/Kodi =14 fixed version: no fixed version available impact: medium homepage:...
Kodi / XBMC crossite scripting
Crossite scripting in web interface...
