Unfixed XSS vulnerability at mp3.bihlink.com

Security researcher Apollo15, has submitted on 12/03/2008 a cross-site-scripting XSS vulnerability affecting mp3.bihlink.com, which at the time of submission ranked 29609 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is current...

Code injection

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...

CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...

CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...

CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...

CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via "MP3 files with metadata consisting only of separators."...

Streamripper lib/http.c文件多个缓冲区溢出漏洞

BUGTRAQ ID: 32356 CVECAN ID: CVE-2008-4829 StreamRipper能够将网上的MP3流媒体保存到硬盘中，特别适合录制网络MP3广播。 Streamripper的lib/http.c文件中的httpparsescheader函数在解析以Zwitterion v开始的超长HTTP头时、httpgetpls函数在解析包含有超长项的特制pls播放列表时、httpgetm3u函数在解析包含有超长File项的特制m3u播放列表时存在缓冲区溢出漏洞。如果用户受骗连接到了恶意的服务器并加载了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。...

X10media Mp3 Search Engine <= 1.6 Remote File Disclosure Vulnerability

No description provided by source. THUNDER X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability Founded by : THUNDER t4hathotmail.fr Dork: "This search engine is in no way intended for illegal downloads. " File : Download.php...

x10media-disclose.txt

THUNDER X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads. " File : Download.php =========================================================================================== to rea...

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

X10media Mp3 Search Engine 1.6 - Remote File Disclosure THUNDER X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads. " File : Download.php...

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

THUNDER X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads. " File : Download.php =========================================================================================== to rea...

X10media Mp3 Search Engine <= 1.6 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== X10media Mp3 Search Engine How to use : http://127.0.0.1/encode.php?t=Url Ex : http://127.0.0.1/encode.php?t=includes/constants.php Exploit...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2008-4522

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

Directory traversal

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4522

CVE-2008-4522 describes multiple directory traversal vulnerabilities in the JMweb MP3 Music Audio Search and Download Script. The issue allows remote attackers to cause inclusion and execution of arbitrary local files by manipulating the src parameter (via ..) in the listen.php and download.php s...

jmweb-lfi.txt

JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...

JMweb - src Local File Inclusion

JMweb - src Local File Inclusion + JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...

JMweb Multiple (src) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= JMweb Multiple src Local File Inclusion Vulnerabilities ========================================================= + JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGo...