Vimeo: Reflected XSS on vimeo.com/musicstore

Description The value of the parameter section is reflected in the Javascript function MusicStoreCommon.initialize without escaping, which allows to insert Javascript code. Proof of concept 1. Go to https://vimeo.com/musicstore?section=%27-alertdocument.domain-%27. 2. alertdocument.domain is...

Music Collection, 2.4.6 and below, SQL Injection

Music Collection commuscol, 2.4.6 and below, SQL Injection Fixed in 2.4.10 Notice: http://www.joomlathat.com/news/music-collection/music-collection-2-4-9-released-security-release-2...

NAP Turbo NAS Series Devices Music Station Directory Traversal Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in NAP Turbo NAS Series Devices Music Station, which could be exploited by remote attackers to submit a special request to view...

search.upright-music.com XSS vulnerability

Vulnerable URL: http://search.upright-music.com/search?phrase=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

[SECURITY] Fedora 23 Update: flac-1.3.1-5.fc23

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] Fedora 21 Update: flac-1.3.1-5.fc21

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] Fedora 22 Update: flac-1.3.1-5.fc22

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

bensound.com XSS vulnerability

Vulnerable URL: http://www.bensound.com/royalty-free-music?sort=%2522%253E%253Cimg%2520src%253Da%2520onerror%253Dalert%2528%252fXSSposed%252f%2529%253E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress Music Store plugin open to redirection vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Music Store is one of the plug-ins for an online store for selling audio files. An open redirection vulnerability exists in t...

WordPress Music Store 1.0.14 Open Redirect

Title: Open Redirect Vulnerability in Music Store Wordpress Plugin v1.0.14 Submitter: Nitin Venkatesh Product: Music Store Wordpress Plugin Product URL: https://wordpress.org/plugins/music-store/ Vulnerability Type: URL Redirection to Untrusted Site 'Open Redirect' CWE-601 Affected Versions:...

Music Store <= 1.0.14 - Referer Header Open Redirect

The Music Store – WordPress eCommerce WordPress plugin was affected by a Referer Header Open Redirect security vulnerability. PoC GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Languag...

WordPress Music Store Plugin <= 1.0.14 - Open Redirection

This plugin is prone to an open redirection vulnerability, because of adding HTTP referer to ms-core/ms-submit.php. Solution Update the plugin...

Music Store <= 1.0.14 - Referer Header Open Redirect

The Music Store – WordPress eCommerce WordPress plugin was affected by a Referer Header Open Redirect security vulnerability. GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...

Israeli Singer Jailed for Hacking Madonna Emails

An Israeli Singer and former contestant on a reality talent show has been jailed for hacking Madonna's online accounts and stealing songs from her unreleased music tracks. Adi Lederman, 39, who participated in Israel's version of American Idol called A Star Is Born, is set to spend his 14 months ...

Gaana.com Hacked, 10 Million Users' Details Exposed

Gaana.com -- One of India's most popular music streaming service with more than 10 Million registered users and 7.5 Million monthly visitors -- has reportedly been hacked, exposing the site’s user information database. A Pakistani hacker, who claimed responsibility for the hack, claims that...

WordPress Soundy Background Music Plugin <= 1.0 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in jPlayer.swf. Solution Update the plugin...

Hacker Demonstrates iOS 8.4 Jailbreak

Quite surprising but the just released Apple’s iOS 8.4 beta has been jailbroken by a well-known hacker. Yes, the first beta of iOS 8.4 released by Apple to the developers last week has been jailbroken by Stefan Esser, commonly known as "i0n1c" in the jailbreak community. i0n1c has also shared a...

Qianwei Music 3.5 /source/admincp/include/function.php 登录绕过漏洞

No description provided by source...

Qianwei Music 3.5 /source/connect/callback.php SQL注入漏洞

No description provided by source...

Vimeo: Ability to Download Music Tracks Without Paying (Missing permission check on`/musicstore/download`)

Hello, I'm not sure how serious this is to be honest. If you're downloading tracks without paying, then I'm sure you could find a copy somewhere on the internet anyway. But I guess it's still an issue. When browsing the Music Store https://vimeo.com/musicstore, some tracks are free. To download...