4551 matches found
Music-Animation-Machine-MIDI-Player-SEH
Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 junk='\x41' 112 seh='\xeb\x06\x90\x90' pad='\x90' 10 junk2='\x42' 9496 Sor...
Digital-Music-Pad-8.2.3.4.8-(.pls)
Digital Music Pad Version 8.2.3.4.8 SEH overflow Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerable version DJ Studio Pro Version 8.2.3.4.8 filename = "POC.pls" windows/exec -...
[SECURITY] Fedora 21 Update: mingw-flac-1.3.1-1.fc21
FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...
[SECURITY] Fedora 20 Update: flac-1.3.1-1.fc20
FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...
phpSound Music Sharing Platform 1.0.5 Cross Site Scripting
Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link: http://codecanyon.net/item/phpsound-music-sharing-platform/9016117 Software Test Link: http://phpsound.com/demo Vulnerabilities Description:...
phpSound Music Sharing Platform 1.0.5 - Multiple XSS Vulnerabilities
No description provided by source. Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link: http://codecanyon.net/item/phpsound-music-sharing-platform/9016117 Software Test Link:...
phpSound Music Sharing Platform Multiple XSS Vulnerabilities
Usage Info phpSound is a Social Music Sharing Platform similar with SoundCloud, that allows users to upload their music online and share them with the world. ===Stored XSS=== Create a Playlist and then you can run any XSS payload on "Title" or "Description" input fields. Sample Payload for Stored...
phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities
phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link:...
phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities
Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link: http://codecanyon.net/item/phpsound-music-sharing-platform/9016117 Software Test Link: http://phpsound.com/demo Vulnerabilities Description:...
[SECURITY] Fedora 20 Update: gnurobbo-0.66-4.20141028svn412.fc20
GNU Robbo is a free open source port of Janusz Pelc's Robbo which was distributed by LK Avalon in 1989. Features + Graphical skin support: Oily, Original and Tronic + Sound skin support: Default, Free and Oily + Support for user supplied music + 1113 levels across 28 packs converted from Robbo an...
Digital Music Pad Version 8.2.3.3.4 缓冲区溢出漏洞
No description provided by source...
CVE-2014-7506
The Realtime Music Rank aka com.blogspot.imapp.immusicrank2 application 5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Realtime Music Rank aka com.blogspot.imapp.immusicrank2 application 5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7506
The Realtime Music Rank Android app (package com.blogspot.imapp.immusicrank2), version 5.5, does not verify SSL X.509 certificates, enabling potential MITM attackers to spoof servers and access sensitive information via crafted certificates; no remediation details are provided in the connected so...
CVE-2014-7506
The Realtime Music Rank aka com.blogspot.imapp.immusicrank2 application 5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
forum.universalmusic.it Open Redirect vulnerability
Open Bug Bounty ID: OBB-50878 Description| Value ---|--- Affected Website:| forum.universalmusic.it Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
[SECURITY] Fedora 20 Update: juk-4.14.1-1.fc20
Juk is a jukebox, tagger and music collection manager...
dbPowerAmp 2.010.0 - Local Buffer Overflow
dbPowerAmp 2.010.0 - Local Buffer Overflow dbPowerAmp Buffer Overflow Vendor: Illustrate Product: dbPowerAmp Version: = 2.0/10.0 Website: http://www.dbpoweramp.com BID: 11266 CVE: CVE-2004-1569 OSVDB: 10380 11126 11127 SECUNIA: 12684 PACKETSTORM: 34531 Description: Often called the Swiss Army kni...
CVE-2014-6664
The CVE-2014-6664 entry concerns the Android app Latin Angels Music HD (com.applizards.lafreetj) v2.0, where SSL/TLS connections do not verify X.509 certificates. This missing certificate validation can enable man-in-the-middle attackers to spoof servers and access sensitive information via a cra...
Zen Cart 1.5.3 - Multiple Vulnerabilities
No description provided by source. Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...