Joomla! Component Music Manager - Local File Inclusion

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...

QNAP Music Station < 5.4.0 - Authentication Bypass

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

openSUSE 16 Security Update : libmodplug (openSUSE-SU-2026:22165-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22165-1 advisory. Changes in libmodplug: - CVE-2026-108577: This issue affects the function abcaddgchord of the file src/loadabc.cpp of the component ABC Music...

Security update for libmodplug (moderate)

openSUSE security update: security update for libmodplug ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22165-1 Rating: moderate References: bsc1275624 bsc1284977 bsc1285765 bsc1285766 Cross-References: CVE-2026-108577 CVE-2026-111270 CVE-2026-1112...

WordPress Music Store – WordPress eCommerce plugin <= 1.4.7 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Quentin VILLAIN in WordPress Plugin Music Store versions = 1.4.7...

CVE-2026-115497

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

CVE-2026-115497 Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

EUVD-2026-108583

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

CVE-2026-115497

The Music Store WordPress eCommerce plugin is vulnerable to Directory Traversal in all versions up to and including 1.4.7 . The flaw exists in the 'f' parameter , allowing unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information. Successful explo...

CVE-2026-115497 Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

PT-2026-121757

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

Fake Amazon Music x YouTube deal lures creators into a Google login trap

.kadence-column476672104e78-a1 .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column476672104e78-a1 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column476672104e78-a1...

MAL-2026-17986 Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26229d755e0027c55285fb47944159ac96997d134e56312b687538dedb41522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26229d755e0027c55285fb47944159ac96997d134e56312b687538dedb41522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

CVE-2026-111152

A flaw was found in game-music-emu. This flaw allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted audio files. By providing a specially crafted ZXAYEMUL file with an oversized track table, an integer underflow in the AY loader triggers an...