QNAP Systems Music Station Path Traversal Vulnerability

QNAP Systems Music Station is a music playback and management application from QNAP Systems. A path traversal vulnerability exists in QNAP Systems Music Station 5.3.22 and earlier versions that could allow an authenticated user to read the contents of an unexpected file and expose sensitive data...

QNAP Systems Music Station Path Traversal Vulnerability

QNAP Systems Music Station is a music playback and management application from QNAP Systems. A path traversal vulnerability exists in QNAP Systems Music Station 5.3.22 and earlier versions that could allow an authenticated user to read the contents of an unexpected file and expose sensitive data...

QQ Music Command Execution Vulnerability

QQ Music is the official music playback software from Tencent. A command execution vulnerability exists in QQ Music, which can be exploited by an attacker to execute arbitrary commands...

Improver Validation of File Name Causes RCE

Description Due to insufficient sanitization of the music file name, it is possible to execute arbitrary commands on the victims computer, through a specially crafted file name. Note that this bug was only found exploitable only on the MacOS version of this application. Although still applicable ...

Exploit for Improper Input Validation in Lexmark Cxtpc_Firmware

CVE-2023-34362 POCs for credential dumping, reverse shells, an...

[SECURITY] Fedora 37 Update: libopenmpt-0.6.11-1.fc37

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

CVE-2023-32427

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2023-28203

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

CVE-2023-28203

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

CVE-2023-32427

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

Information disclosure

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2023-28203

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

CVE-2023-28203

Apple Music on Android (Android 5.0+) fixed in version 4.2.0 for Android (CVE-2023-28203). The issue allowed an app to access contacts due to inadequate checks; Apple attributes the fix to improved checks. Exploit details, affected components, and in‑the‑wild status are not provided in the suppli...

CVE-2023-28203

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts...

CVE-2023-32427

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2023-32427

CVE-2023-32427 affects Apple Music on Android (pre-4.2.0). The issue allowed a privileged network attacker to intercept unencrypted network traffic; remediation was to enforce HTTPS for data in transit in the 4.2.0 Android release. Exploitation details are not provided in the connected documents.

CVE-2023-32427

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

PT-2023-23787 · Apple · Music

Name of the Vulnerable Software and Affected Versions: Apple Music versions prior to 4.2.0 for Android Description: The issue allows an attacker in a privileged network position to intercept network traffic. This was addressed by using HTTPS when sending information over the network...

Apple Music 安全漏洞

Apple Music is a music software program from the American company Apple. Apple Music for Android version 4.2.0 suffers from a security vulnerability that stems from the fact that the application may be able to access contacts...