Vulnerabilidades em kalcaddle

24 resultados
Análise Vexday

Kalcaddle apresenta 22 vulnerabilidades catalogadas, sem registros de exploração ativa em campo (KEV) ou falhas críticas, indicando risco contido. A fraqueza dominante é Server-Side Request Forgery (CWE-918), padrão de risco moderado. O cenário é estável, com apenas 1 vulnerabilidade publicada nos últimos 90 dias.

CVE-2026-1066MEDIUMkalcaddle kodbox Compression zip command injectionEPSS 5.0%CVE-2022-4944MEDIUMkalcaddle KodExplorer cross-site request forgeryEPSS 2.7%CVE-2026-4591MEDIUMkalcaddle kodbox fileThumb Endpoint app.php checkBin os command injectionEPSS 2.5%CVE-2023-6848HIGHkalcaddle kodbox index.class.php check command injectionEPSS 2.3%CVE-2026-2560MEDIUMkalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injectionEPSS 2.3%CVE-2026-8753MEDIUMkalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injectionEPSS 1.2%CVE-2023-6851MEDIUMkalcaddle KodExplorer ZIP Archive app.php unzipList code injectionEPSS 0.9%CVE-2023-6849HIGHkalcaddle kodbox app.php cover server-side request forgeryEPSS 0.9%CVE-2023-6850MEDIUMkalcaddle KodExplorer API Endpoint unrestricted uploadEPSS 0.8%CVE-2022-46154HIGHArbitrary file access in KodExplorerEPSS 0.8%CVE-2023-6852MEDIUMkalcaddle KodExplorer app.php server-side request forgeryEPSS 0.8%CVE-2023-6853MEDIUMkalcaddle KodExplorer app.php index server-side request forgeryEPSS 0.7%CVE-2026-4831MEDIUMkalcaddle kodbox Password-protected Share auth.class.php can improper authenticationEPSS 0.5%CVE-2025-11016MEDIUMkalcaddle kodbox index.class.php fileOut path traversalEPSS 0.4%CVE-2025-10233MEDIUMkalcaddle kodbox editor.class.php fileSave path traversalEPSS 0.4%CVE-2026-4592MEDIUMkalcaddle kodbox Password Login index.class.php tfaVerify improper authenticationEPSS 0.3%CVE-2026-5618MEDIUMkalcaddle kodbox shareMake/shareCheck server-side request forgeryEPSS 0.3%CVE-2025-9414MEDIUMkalcaddle kodbox Download from Link serverDownload server-side request forgeryEPSS 0.3%CVE-2026-18720MEDIUMkalcaddle kodbox msgWarning Plugin action improper authorizationEPSS 0.3%CVE-2026-4588MEDIUMkalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded keyEPSS 0.3%