Lucene search
+L

195 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•2 views

CVE-2023-52207: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

9.1CVSS7.8AI score0.00616EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•21 views

PT-2024-14473 · Unknown · Html5 Mp3 Player With Playlist Free

Name of the Vulnerable Software and Affected Versions: HTML5 MP3 Player with Playlist Free versions 3.0.0 and earlier Description: The issue is related to the deserialization of untrusted data, which can lead to potential security risks. No information is provided about the estimated number of...

9.1CVSS8.8AI score0.00616EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•1 views

CVE-2023-52202: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

9.1CVSS7.2AI score0.00618EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•14 views

WordPress Plugin HTML5 MP3 Player with Playlist Free Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin HTML5 MP3...

9.1CVSS6.9AI score0.00616EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/01/03 12:00 a.m.•17 views

WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Software HTML5 MP3 Player with Folder Feedburner Type Plugin Vulnerable versions = 2.8.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52202 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID 379c769eaf42 Credits Rafie Muhammad...

9.1CVSS6.8AI score0.00618EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/01/03 12:00 a.m.•22 views

WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection

Software HTML5 MP3 Player with Playlist Free Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52207 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID 5809c2a2acac Credits Rafie Muhammad...

9.1CVSS6.8AI score0.00616EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/03/06 2:15 p.m.•13 views

CVE-2023-0069

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS6.1AI score0.00743EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/06 2:15 p.m.•29 views

CVE-2023-0069

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.3AI score0.00743EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/03/06 1:34 p.m.•12 views

CVE-2023-0069 WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6AI score0.00743EPSS
SaveExploits1References1
CVE
CVE
•added 2023/03/06 1:34 p.m.•78 views

CVE-2023-0069

The CVE-2023-0069 entry concerns the WordPress plugin WPaudio MP3 Player up to version 4.0.2 . The issue is a stored cross-site scripting (XSS) vulnerability caused by not validating/escaping certain shortcode attributes before rendering them in posts/pages, enabling users with the contributor ro...

5.4CVSS5.3AI score0.00743EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/03/06 12:00 a.m.•16 views

WordPress plugin WPaudio MP3 Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.4CVSS5.5AI score0.00743EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•2 views

CVE-2023-0069: Undefined Security Weakness

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.9AI score0.00743EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2017/05/28 10:19 a.m.•18 views

folkawards.ca XSS vulnerability

Vulnerable URL:...

6.2AI score
SaveExploits0
myhack58
myhack58
•added 2017/03/01 12:00 a.m.•48 views

Windows Exploit development tutorial series--stack injection a-vulnerability warning-the black bar safety net

! Foreword Welcome to the heap spray tutorial the first part. This Part I will introduce the IE under typical heap spray technique, the second part will introduce the precise injection and IE8 under UAF vulnerabilities. It is worth mentioning that, the stack injection is just a payload Delivery...

8AI score
SaveExploits0
CNVD
CNVD
•added 2016/10/08 12:00 a.m.•5 views

Joomla Shape 5 MP3 Player Local File Disclosure Vulnerability

Joomla Shape 5 MP3 Player is a plugin for playing music on top of Joomla. A local file disclosure vulnerability exists in Joomla Shape 5 MP3 Player version 2.0, which can be exploited by attackers via a specific URL, resulting in the disclosure of local file information...

6.5AI score
SaveExploits0References1
hackapp
hackapp
•added 2016/04/01 9:38 a.m.•9 views

MP3 Player Pro - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MP3 Player Pro published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:38 a.m.•10 views

MP3 Player - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MP3 Player published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:38 a.m.•17 views

MP3 Player - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MP3 Player published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:37 a.m.•12 views

Mp3 player - Dangerous filesystem permissions, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Mp3 player published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:37 a.m.•10 views

MP3 Player - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MP3 Player published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder