An ISP Settled Piracy Lawsuits. Could Users Take the Hit?

Now that Charter has reached settlements with major record labels, it’s unclear whether the cable provider will pull the plug on users who pirate music...

jackiesmusic.com Cross Site Scripting vulnerability OBB-2741614

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kreusch-sheet-music.net Cross Site Scripting vulnerability OBB-2670921

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in wix-music-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 883da00a86a30f54e03a143ee6f22b5e9e9e80c09c21a84dea6fd3d6ca36f813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7172 Malicious code in wix-music-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 883da00a86a30f54e03a143ee6f22b5e9e9e80c09c21a84dea6fd3d6ca36f813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4739 Malicious code in music-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3e5a29f1e03c908a98561322b9a9d17c15b951f7e1a38ae5f4c3d82eb29ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in music-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3e5a29f1e03c908a98561322b9a9d17c15b951f7e1a38ae5f4c3d82eb29ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in music-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec918691a90b4768ce57e736387051876ec127e2bb359539ef14c18fe673d668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4738 Malicious code in music-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec918691a90b4768ce57e736387051876ec127e2bb359539ef14c18fe673d668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: OSV:GHSA-RVGF-69J7-XH78...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22083

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22071

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-25651

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22087

memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22065

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-22068

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35112

A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...