A week in security (December 22 – December 28)

Last week on Malwarebytes Labs: Pornhub tells users to expect sextortion emails after data exposure Hacktivists claim near-total Spotify music scrape Stay safe! We don 't just report on threats—we help safeguard your entire digital identity Cybersecurity risks should never spread beyond a headlin...

CVE-2025-47320

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-47320

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-47320 Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-47320 Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback...

EUVD-2025-204031

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-47320

CVE-2025-47320 affects Qualcomm’s audio-kernel where a memory corruption occurs while processing MFC channel configuration during music playback. The CVE entry notes a high-severity issue with local attack vector, requiring low privileges and no user interaction, affecting confidentiality, integr...

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

EUVD-2025-201808

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

PT-2025-49593

Name of the Vulnerable Software and Affected Versions Lyrion Music Server versions prior to 9.0.4 Description A stored cross-site scripting XSS issue exists in the web interface. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. This...

Lyrion Music Server 安全漏洞

Lyrion Music Server is an audio server software from the Lyrion organization. A security vulnerability exists in Lyrion Music Server 9.0.3 and earlier versions, which stems from a lack of output coding in the web interface and could lead to stored cross-site scripting...

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

Rareprob HD Video Player All Formats 路径遍历漏洞

Rareprob HD Video Player All Formats is a video player from Rareprob India. A path traversal vulnerability exists in Rareprob HD Video Player All Formats version 12.1.372, which stems from a path traversal issue in the component com.rocks.music.videoplayer...

CVE-2025-34330

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

CVE-2025-34330

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

CVE-2025-34330 AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...

CVE-2025-34330 AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...