Stack overflow

Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287...

CVE-2007-2487

CVE-2007-2487 is described in connected records as a stack-based buffer overflow in AtomixMP3 2.3 that allows remote attackers to execute arbitrary code via a long filename in an MP3 file; this vector is stated to be different from CVE-2006-6287. The available sources do not reveal a patch versio...

CVE-2007-2487

Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287...

adv81-K-159-2007.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV81$2007 ----------------------------------------------------------------------------------------- ECHOADV81$2007 wordpress plugins wordTube = 1.43 wpPATH Remote File Inclusion Vulnerability...

Atomix MP3 - .MP3 File Buffer Overflow

Atomix MP3 - .MP3 File Buffer Overflow // source: https://www.securityfocus.com/bid/23756/info Atomix MP3 is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit...

Atomix MP3 - '.MP3' File Buffer Overflow

// source: https://www.securityfocus.com/bid/23756/info Atomix MP3 is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue by enticing a victim to load ...

getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities

getID3, a web-based tool for extracting information from MP3 files, is installed on the remote web server. The installation of getID3 includes a set of demo scripts that allow an unauthenticated, remote attacker to read and delete arbitrary files, write files with some restrictions, and execute...

Design/Logic Flaw

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

Clever use of WinRAR will be confidential camouflage was imperceptible-vulnerability warning-the black bar safety net

WinRAR is everyone commonly used compression/decompression program, in addition to this we also often put WinRAR as encryption software to use, in the compressed file when the Set password can protect the data of the object. But specifically for WinRAR password hack software very much, although...

CVE-2006-5613

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

CVE-2006-5613

CVE-2006-5613 affects MP3 Streaming DownSampler (mp3SDS) 3.0. The vulnerability is a PHP remote file inclusion in Core/core.inc.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via the fullpath parameter. The issue is documented across multiple sources (NVD...

CVE-2006-5613

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

EUVD-2006-5598

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

Debian DSA-901-1 : gnump3d - programming error

Several vulnerabilities have been discovered in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3349 Ludwig Nussel discovered several temporary files that are created with predictable filenames in a...

Debian DSA-877-1 : gnump3d - XSS, directory traversal

Steve Kemp discovered two vulnerabilities in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3122 The 404 error page does not strip malicious JavaScript content from the resulting page, which would ...

CVE-2006-3367

Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information including the database configuration. This CVE (CVE-2006-3367) is documented across multiple sources (NVD/NVD CVE list) a...

mp3com.txt

mp3.com - Cross site scripting vulnerability ---------------------------------------------- Type: Cross site scripting Date: June, 15th 2006 ---------------------------------------------- Credits: ---------------------------------------------- Discovered by: David "Aesthetico" Vieira-Kurz...

mp3search.txt

MP3 Search/Archive v1.2 Homepage: http://www.bloodys.com Affected files: Search input box. index.php Data is not properally sanatized before its generated. For PoC try putting the code below in the search box: Screenshots: http://www.youfucktard.com/xsp/mp3search.jpg XSS vuln via res variable on...

CVE-2006-3071

CVE-2006-3071 describes a cross-site scripting (XSS) vulnerability in index.php of MP3 Search/Archive 1.2, allowing an attacker to inject arbitrary script or HTML via the 1) keywords parameter used by the search box, and 2) res parameter. The provided sources identify the flaw but do not include ...