CVE-2024-2930

CVE-2024-2930 affects SourceCodester Music Gallery Site 1.0. The vulnerability exists in the file classes/Master.php?f=save_music and leads to unrestricted, remote file upload. Exploitation details are publicly disclosed. No fixed version is provided in the documents; remediation guidance in conn...

CVE-2024-2930 SourceCodester Music Gallery Site unrestricted upload

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=savemusic. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

Music Gallery Site 代码问题漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a file upload vulnerability in the file classes/Master.php...

PT-2024-22851 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical vulnerability was found in the SourceCodester Music Gallery Site, affecting an unknown functionality of the file classes/Master.php?f=save music. This vulnerability leads t...

scottishmusicindex.org Cross Site Scripting vulnerability OBB-3884570

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

californiamusic.fr Cross Site Scripting vulnerability OBB-3883975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Heather Couk is here to keep your spirits up during a cyber emergency, even if it takes the “Rocky” music

"Gotta Fly Now" is more closely associated with corporate hype videos or conferences with thousands of attendees in a mid-market citys convention center than it is from its origins in the "Rocky" movies. But Heather Couk thinks its useful in incident response calls, too. Couk, an incident respons...

nashvillemusicscoring.com Cross Site Scripting vulnerability OBB-3861274

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@openwebrx-js/cli (>=0.1.0, <=0.1.7), @thrashplay/music (0.3.5) +2 more potentially affected by CVE-2024-21522 via audify (1.10.1)

audify NPM version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on audify and may be impacted: - @openwebrx-js/cli =0.1.0, =0.1.7 - @thrashplay/music 0.3.5 - emoemu 0.2.0 - kitty-media-player 0.3.0 Source cves: CVE-2024-21522 Source advisory:...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +195 more potentially affected by CVE-2024-21521 via @discordjs/opus (>=0.1.0, <=0.9.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.0, =2.0.0, =1.0.3, =1.0.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2024-21521 Source advisory: SNYK:JS-DISCORDJSOPUS-6370643...

musicappnews.com Cross Site Scripting vulnerability OBB-3854498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

musicrecords.cz Cross Site Scripting vulnerability OBB-3841900

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Music component in operating systems such as macOS, iPadOS, and iOS allows attackers to gain increased privileges.

The vulnerability of the Music component in operating systems such as macOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

discjockeymusicsupply.com Cross Site Scripting vulnerability OBB-3838110

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

manusmcguiremusic.ie Improper Access Control vulnerability OBB-3833756

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-51442

Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subsonic endpoint, allowing for authentication bypass. This exploit enables unauthorized access to any known account by utilizing a JSON Web Token JWT signed wit...

CVE-2023-51442

Navidrome vulnerability CVE-2023-51442 affects the subsonic authentication endpoint. A JWT signed with the hardcoded key "not so secret" can bypass authentication on instances that have never been restarted, potentially granting access to existing user accounts via the /rest/ endpoint. The issue ...

music-sp.com Improper Access Control vulnerability OBB-3805738

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

manitobamusic.com Improper Access Control vulnerability OBB-3804519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

launchpadmusicservices.com Improper Access Control vulnerability OBB-3803186

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...