PT-2017-14782 · Unknown +2 · Game-Music-Emu +2

Name of the Vulnerable Software and Affected Versions: Game Music Emu library version 0.6.1 Description: The issue is related to the Mem File Reader::read avail function in Data Reader.cpp, which does not ensure a non-negative size. This allows remote attackers to cause a denial of service,...

music.baidu.com XSS vulnerability

Open Bug Bounty ID: OBB-448554 Description| Value ---|--- Affected Website:| music.baidu.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Sony Music Center for PC Untrustworthy Search Path Vulnerability

Sony Music Center for PC is a PC-based music player from Sony Japan. An untrusted search path vulnerability exists in Sony Music Center for PC version 1.0.00. The vulnerability can be exploited to gain privileges via a malicious DLL in a directory...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10892

CVE-2017-10892 affects Music Center for PC version 1.0.00. It is an untrusted search path vulnerability that can allow an attacker to gain privileges by placing a Trojan DLL in an directory that is searched during execution of the installer or related components. The issue is documented across mu...

CVE-2017-10899

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors...

Nanjing Wedding Information Technology Co., Ltd. wedding music APP has information leakage vulnerability

Wedding Fun APP is a one-stop wedding butler service platform that focuses on saving money on weddings. There is an information leakage vulnerability in Nanjing Wedding Information Technology Company Limited's Marriage Music APP. The vulnerability is due to the server returning verification code...

music.4share.vn XSS vulnerability

Open Bug Bounty ID: OBB-437723 Description| Value ---|--- Affected Website:| music.4share.vn Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

adams-music.com XSS vulnerability

Open Bug Bounty ID: OBB-435715 Description| Value ---|--- Affected Website:| adams-music.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in JYmusic AlbumController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic AlbumController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

Code injection

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Overview Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. and Shun Suza...

JVN#08517069: The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the...

Android malware found in hundreds of music player apps on Play Store

By Waqas Its just another day with just another news explaining the This is a post from HackRead.com Read the original post: Android malware found in hundreds of music player apps on Play Store...