[SECURITY] Fedora 25 Update: mpg123-1.25.6-1.fc25

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

[SECURITY] Fedora 26 Update: mpg123-1.25.6-1.fc26

Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...

Zinf Audio Player PLS File Stack Buffer Overflow (CVE-2004-0964)

A stack buffer overflow vulnerability exists in Zinf Audio Player 2.2.1. The vulnerability is due to insufficient bounds checking on a PLS file. A remote attacker could exploit this vulnerability by enticing a victim to open a specially crafted PLS file. Successful exploitation could lead to...

[SECURITY] Fedora 25 Update: audacious-3.8.2-1.fc25

Audacious is an advanced audio player. It is free, lightweight, currently based on GTK+ 2, runs on Linux and many other nix platforms and is focused on audio quality and supporting a wide range of audio codecs. It still features an alternative skinned user interface based on Winamp 2.x skins...

Xion Audio Player 1.5 (build 160) - .mp3 Crash (PoC)

Xion Audio Player 1.5 build 160 - .mp3 Crash PoC Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)

Exploit for windows platform in category dos / poc Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)

Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

Xion Audio Player 1.5 Denial Of Service

Exploit Title: Xion Audio Player new'legit.mp3'; whatever mp3 you got handy $mp3-titleset'A' x 5000; title/artist tags $mp3-artistset'A' x 5000; may vary although both seems to be needed $mp3-updatetags; $mp3-close; print " Completed.\n";...

Mpxplay MultiMedia Commander 2.00a - '.m3u' Stack Buffer Overflow (PoC)

Exploit Title: Mpxplay Multimedia Commander Stack-based BOF Date: 9/1/2015 Exploit Author: UnN0n Software Link: http://sourceforge.net/p/mpxplay/activity?source=projectactivity Version: V2.00a Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'mpxpmmc.exe'. 2- Browser Crash.m3u i...

Xion Audio Player 1.5 build 155 Stack Based Buffer Overflow Exploit

Exploit for windows platform in category dos / poc Exploit Title: Xion Audio Player build 155 Stack Based BOF. Date: 8/19/2015 Exploit Author: UnN0n Software Vendor : http://www.xionplayer.com Software Link: http://www.xionplayer.com/page/download Version: 1.5 Build 155 Tested on: Windows 7 x8632...

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow Exploit Title: Xion Audio Player build 155 Stack Based BOF. Date: 8/19/2015 Exploit Author: UnN0n Software Vendor : http://www.xionplayer.com Software Link: http://www.xionplayer.com/page/download Version: 1.5 Build 155 Tested on: Windows 7...

Xion Audio Player 1.5 build 155 - Stack Buffer Overflow

Exploit Title: Xion Audio Player build 155 Stack Based BOF. Date: 8/19/2015 Exploit Author: UnN0n Software Vendor : http://www.xionplayer.com Software Link: http://www.xionplayer.com/page/download Version: 1.5 Build 155 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'Xion.exe'...

Serenity Media Player 3.2.3 Buffer Overflow Exploit

Exploit for windows platform in category local exploits Serenity is a playlist based audio player for Windows. It features a clean and simple interface with minimal overhead.Formats supported are limited only by CODECs and drivers installed on the machine SEH Local buffer overflow in Serenity Aud...

CVE-2015-4414

The CVE-2015-4414 issue affects WordPress SE HTML5 Album Audio Player plugin versions up to 1.1.0. A directory traversal vulnerability exists in download_audio.php, allowing remote, unauthenticated attackers to read arbitrary server files by crafting a .. path in the file parameter. Root cause: i...

Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0

Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...

WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal

WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site:...

WordPress SE HTML5 Album Audio Player 1.1.0 Directory Traversal Vulnerability

WordPress SE HTML5 Album Audio Player plugin version 1.1.0 suffers from a traversal vulnerability. Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124...

WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal

Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...

WordPress SE HTML5 Album Audio Player 1.1.0 Directory Traversal

Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...

SE HTML5 Album Audio Player <= 1.1.0 - Local File Include

The se-html5-album-audio-player v1.1.0 plugin for wordpress has a local file include vulnerability. The downloadaudio.php file does not check to see if the user is authenticated, it only attempts to check if the path is in /wp-content/uploads which is easily defeated with ../...