indonesianmusic.com XSS vulnerability

Vulnerable URL: http://www.indonesianmusic.com/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 02:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

Hungama Music - Songs & Videos - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hungama Music - Songs & Videos published at the 'play' market has multiple vulnerabilities...

Apple Could Offer iMessage App for Android

Although Apple has its own operating system for both desktop Mac OS X and iPhone iOS, the company has always tried to port its in-house applications to other OS platforms. Apple debuted on its rival mobile OS platform last year with the launch of Apple Music on Android. However, iTunes and Safari...

member.soliton-music.com XSS vulnerability

Vulnerable URL: https://member.soliton-music.com/signin.php?msg=%22%3E%3Csvg/onload=confirm%28/xssposed/%29//=payment-plan Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

PHP DOS vulnerability new: CVE-2 0 1 5-4 0 2 4 Reviewed-vulnerability warning-the black bar safety net

0x01 bypassing the WAF principle According to the PHP DOS vulnerability principle, in multipartbufferheaders function parses the header of the corresponding value, the value value exists in the n rows. Each line of the string with whitespace at the beginning or does not exist. character':'are...

Music Cloud 1.3 Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

videos.malawi-music.com XSS vulnerability

Open Bug Bounty ID: OBB-114487 Description| Value ---|--- Affected Website:| videos.malawi-music.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Saved the day: QQ music“wormhole”adventures-vulnerability warning-the black bar safety net

0x00 background A weekend afternoon, the terminal security team of little friends at the seaside mission built to roast meat and drink wine, TSRC vulnerability report mailbox receive Trend Micro's classmates sent the vulnerability report, the report referred to the mobile phone QQ music using the...

velvetmusic.nl XSS vulnerability

Vulnerable URL: http://www.velvetmusic.nl/shopping/snelzoektemplate.php?search=name=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=0〈=nl.VlZY3uLAS1U Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:53 GMT Vulnerability type:| XSS...

store.universal-music.co.jp XSS vulnerability

Vulnerable URL: http://store.universal-music.co.jp/GoodsSearchList.jsp?keyword="'--; Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

search.upright-music.pl XSS vulnerability

Vulnerable URL: http://search.upright-music.pl/search?phrase=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

talktalk.co.uk XSS vulnerability

Vulnerable URL: http://www.talktalk.co.uk/music/radio/new2/index.html?rdstn=classical.html%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 17.11.2015 Latest check for patch:| 17.11.2015 17:16 GMT Vulnerability type:| XSS Vulnerability status:|...

Vulnerability in Newphoria MEGAPHONE MUSIC application

Newphoria MEGAPHONE MUSIC application for Android and iOS is a suite of music player applications based on the Android and iOS platforms from Newphoria Japan. A security vulnerability exists in the Newphoria MEGAPHONE MUSIC application for Android and iOS. The vulnerability can be exploited by an...

CVE-2015-5634

The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5634

CVE-2015-5634 affects Newphoria MEGAPHONE MUSIC (Android and iOS). The MEGAPHONE MUSIC app (Android/iOS) before version 1.1 is vulnerable to a URL-whitelist bypass via the app’s URL scheme, enabling loading of arbitrary pages. JVN/JVNDB entries specify impact: Android may allow an API deemed in t...

CVE-2015-5634

The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

MEGAPHONE MUSIC vulnerable to URL whitelist bypass

Overview MEGAPHONE MUSIC provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". MEGAPHONE MUSIC contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprou...

JVN#83862346: MEGAPHONE MUSIC vulnerable to URL whitelist bypass

MEGAPHONE MUSIC provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". MEGAPHONE MUSIC contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Impact Android version of this app may allow an...

filmmusic.ru XSS vulnerability

Vulnerable URL: http://filmmusic.ru/prettyPhotoi/x,/x Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 16:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1179317 Google Pagerank| 2 VIP website status:| No...

Vimeo: Reflected XSS on vimeo.com/musicstore

Description The value of the parameter section is reflected in the Javascript function MusicStoreCommon.initialize without escaping, which allows to insert Javascript code. Proof of concept 1. Go to https://vimeo.com/musicstore?section=%27-alertdocument.domain-%27. 2. alertdocument.domain is...