CVE-2023-7231

CVE-2023-7231 – Audible fetchResource를 통한 치명적인 SSRF → Memcached/Docker RCE 체인 🔥 개요 이 취약점은 .audible.com의 Audible fetchResource API에서 서버 측 요청 위조SSRF 를 가능하게 하여, 인증되지 않은 공격자가 내부 인프라로 피벗할 수 있도록 합니다. SSRF 페이로드 체이닝을 통해 다음을 달성했습니다: 🛡 AWS EC2 메타데이터 접근 🐳 127.0.0.1:2375의 Docker 소켓 탐색 🔐 /env,...

Giving AI a Headache: Acoustic Adversarial Attacks to Computer Vision Applications

Artificial Intelligence AI is increasingly used to automate a variety of real-world computer vision CV applications, such as autonomous vehicle control, facial recognition, and security cameras. Recent research has shown that acoustic vibration can induce real physical motion in cameras,...

CVE-2019-11554

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

EUVD-2009-0144

Malware in sbrugna...

EUVD-2017-8235

Malware in sbrugna...

EUVD-2019-3225

Malware in sbrugna...

Malware in audible-react-assets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5212 Malicious code in audible-react-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390437d447abf7cd857a317c79c2904de3c54d6ad86d8fcd26b65a13ecd6a59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in audible-react-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390437d447abf7cd857a317c79c2904de3c54d6ad86d8fcd26b65a13ecd6a59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

audibleartefacts.com Cross Site Scripting vulnerability OBB-3906847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-887 Malicious code in this-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd292ce105e032e6f95f8e798f41f1c13fa41e2e1b118e6e63075e73e32e7f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-225 Malicious code in dark-warriors-promise-the-children-of-the-gods-8-by-it-lucas-on-audible-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8775886a3d9648305bf330fb02cd6f1fdb7ccb78a5bd3a67441d1e40fd9004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2009-0136

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...

SUSE CVE-2009-0135

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

Audible has an unspecified vulnerability

Audible is an online playback application for audiobooks from the American company Audible. A security vulnerability exists in versions 2.34.0 and earlier of Audible, based on the Android platform, which stems from the program's failure to validate SSL credentials against Adobe SDKs. An attacker...

CVE-2019-11554

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

CVE-2019-11554

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

Denial of service

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

CVE-2019-11554

The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service...

CVE-2019-11554

Affected: Audible Android app up to version 2.34.0. Issue: Missing SSL certificate validation in Adobe SDKs used by the app, allowing MITM attackers to cause a denial of service. Impact: Availability degradation. Root cause: SSL validation bypass in Adobe SDK integration. Remediation: Not specifi...