CVE-2026-112104

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

CVE-2026-112104

The eremef bandcamp-player software (up to version 1.8.33-beta ) contains a vulnerability in the Remote Control Server component. Specifically, an unknown function within the database.ts file fails to properly enforce authentication when the remoteEnabled argument is manipulated. This flaw allows...

EUVD-2026-104219

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

CVE-2026-112104 eremef bandcamp-player Remote Control Server database.ts missing authentication

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

CVE-2026-112104 eremef bandcamp-player Remote Control Server database.ts missing authentication

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

CVE-2026-112104 eremef bandcamp-player Remote Control Server database.ts missing authentication

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

PT-2026-117326

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

CVE-2026-112104: Missing Authentication for Critical Function

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability

The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...

Discourse: XSS in topics because of bandcamp preview engine vulnerability

Load http://try.discourse.org 2. Click "New topic" 3. Enter this payload https://89.223.28.48/bandcamp.com/album/index.html?XSSa2 to field with placeholder "Type title or paste a link here" 4. Wait for the preview engine to parse the link 4. XSS will fire F151439 You should sanitize external...