QNAP QTS Music Station Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage, management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Music Station is one of the music...

acousticvibesmusic.com XSS vulnerability

Open Bug Bounty ID: OBB-385502 Description| Value ---|--- Affected Website:| acousticvibesmusic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

music-bazaar.com XSS vulnerability

Open Bug Bounty ID: OBB-378289 Description| Value ---|--- Affected Website:| music-bazaar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

carthagemusic.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-363967 Description| Value ---|--- Affected Website:| carthagemusic.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

Command injection

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

CVE-2017-13069 concerns a command-injection vulnerability in QNAP Music Station. Affected are Music Station in QTS 4.2.x (version 4.8.6) and QTS 4.3.x (version 5.0.7) and earlier. If exploited, a remote attacker could execute arbitrary commands on the NAS. Documented CVSS metrics indicate a netwo...

Memory Corruption Vulnerability in Domi Music PC Client

Duo Mi Music PC client is a music player under Beijing Caiyun Online Technology Development Co. A memory corruption vulnerability exists in the DuoMi Music PC client when opening specific aac files, which can be exploited by attackers to cause a denial of service...

Stored Cross-Site Scripting Vulnerability in Music Gang App

Music Help is a music education app. Music Help APP has a stored cross-site scripting vulnerability, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as administrator cookies...

Apple GarageBand Out of Bounds Write Code Execution Vulnerability(CVE-2017-2374)

Summary An exploitable out of bounds write vulnerability exists in the parsing of saved files in Apple's GarageBand version 10.1.5. A specially crafted project file can cause an out of bounds write resulting in an exploitable condition. An attacker can deliver a project file via other means. This...

member.soliton-music.com XSS vulnerability

Vulnerable URL: https://member.soliton-music.com/msg.php?msg=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosur...

Vevo Music Video Service Hacked — 3.12TB of Internal Data Leaked

OurMine is in headlines once again—this time for breaching the popular video streaming service Vevo. After hunting down social media accounts of HBO and defacing WikiLeaks website, the infamous self-proclaimed group of white hat hackers OurMine have hacked Vevo and leaked about 3.12 TB worth of...

music-delivery.de XSS vulnerability

Open Bug Bounty ID: OBB-291286 Description| Value ---|--- Affected Website:| music-delivery.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bipolarbob.me XSS vulnerability

Open Bug Bounty ID: OBB-286424 Description| Value ---|--- Affected Website:| bipolarbob.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Memory Override Access Vulnerability in QQ Music Client

QQ Music client is Tencent's music playback software. A memory override access vulnerability exists in the qmpmp3.dll module of the QQ Music client when parsing a specific mp3, which can be exploited by an attacker to cause a denial of service...

music-car.ru XSS vulnerability

Vulnerable URL: http://music-car.ru/find.php?find= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 687776 VIP website status:| No Check music-car.ru SSL connection:| Grade: A+...

The Pirate Bay Founders Ordered to Pay Music Labels $477,800 in Compensation

Two of the three co-founders of The Pirate Bay—Fredrik Neij and Gottfrid Svartholm Warg—have been ordered by a Finnish court to pay record labels $477,800 in compensation for copyright infringement on the site. Last year in a similar case, Helsinki District Court in Finland ordered Peter Sunde, t...

SQL injection vulnerability in after_str parameter on JYmusic SongsController.class.php page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the afterstr parameter on the JYmusic SongsController.class.php page. A remote attacker can exploit the vulnerability to obtain sensitive database information...