Kkalcaddle

Products

Exploited and recent CVEs

• CVE-2026-104081 High 8.1 KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction 0.8%
• CVE-2026-18721 Medium 4.3 kalcaddle kodbox SSO API Login apiLogin redirect 0.4%
• CVE-2026-18720 Medium 5.3 kalcaddle kodbox msgWarning Plugin action improper authorization 0.5%
• CVE-2026-8753 Medium 6.3 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection 1.9%
• CVE-2026-5618 Medium 5.6 kalcaddle kodbox shareMake/shareCheck server-side request forgery 0.3%
• CVE-2026-4831 Low 3.7 kalcaddle kodbox Password-protected Share auth.class.php can improper authentication 0.5%
• CVE-2026-4830 Medium 5.6 kalcaddle kodbox Public Share userShare.class.php add privilege escalation 0.3%
• CVE-2026-4592 Medium 5.6 kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication 0.4%
• CVE-2026-4591 Medium 4.7 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection 3.5%
• CVE-2026-4590 Low 3.1 kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery 0.2%
• CVE-2026-4589 Medium 6.3 kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery 0.2%
• CVE-2026-4588 Low 3.7 kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key 0.3%
• CVE-2026-2560 Medium 6.3 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection 2.6%
• CVE-2026-1066 Medium 6.3 kalcaddle kodbox Compression zip command injection 5.5%
• CVE-2025-11016 Medium 4.3 kalcaddle kodbox index.class.php fileOut path traversal 0.5%
• CVE-2025-10233 Medium 6.3 kalcaddle kodbox editor.class.php fileSave path traversal 0.5%
• CVE-2025-9414 Medium 4.7 kalcaddle kodbox Download from Link serverDownload server-side request forgery 0.3%
• CVE-2023-6853 Medium 6.3 kalcaddle KodExplorer app.php index server-side request forgery 0.7%
• CVE-2023-6852 Medium 6.3 kalcaddle KodExplorer app.php server-side request forgery 0.8%
• CVE-2023-6851 Medium 6.3 kalcaddle KodExplorer ZIP Archive app.php unzipList code injection 0.9%
• CVE-2023-6850 Medium 6.3 kalcaddle KodExplorer API Endpoint unrestricted upload 0.8%
• CVE-2023-6849 High 7.3 kalcaddle kodbox app.php cover server-side request forgery 0.9%
• CVE-2023-6848 High 7.3 kalcaddle kodbox index.class.php check command injection 2.3%
• CVE-2022-4944 Medium 4.3 kalcaddle KodExplorer cross-site request forgery 2.7%
• CVE-2022-46154 High 8.6 Arbitrary file access in KodExplorer 0.9%