393 matches found
CVE-2004-1561
CVE-2004-1561 Icecast Header Overwrite buffer overflow RCE Update for 568-edit.c Managed to get the original exploit to work. Edited according to this. Usage for 568-edit.c root@Kali:/TryHackme/Ice gcc 568-edit.c -o 568 root@Kali:/TryHackme/Ice ./568 192.168.92.133 Icecast = 2.0.1 Win32 remote co...
CVE-2004-1561-Notes
CVE-2004-1561 Exploitation notes Hello everyone, I'm sharing with you my notes of exploitation CVE-2004-1561 of Icecast on Windows 7 machine If you want to try it on your own here's a great lab How to open my notes I saved my notes in .ctd extension, and opening it in plaintext is chaotic. You ne...
thm-ice-icecast-rce-privesc
TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...
CVE-2018-18820
CVE-2018-18820 CVE-2018-18820 checker for Icecast servers No need for any additional info, all the context is within the main.py file. Just requires requests which we already all have...
[SECURITY] Fedora 45 Update: icecast-2.4.4-29.fc45
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
CVE-2026-100851
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...
CVE-2026-100851 AzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profile
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...
EUVD-2026-87837
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...
CVE-2026-100851 AzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profile
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...
CVE-2026-100851
AzuraCast versions prior to 0.23.8 are vulnerable to a broken access control flaw in the GET /api/station/{id}/vue/profile endpoint. This vulnerability allows authenticated users possessing only View Station Page permissions to access sensitive information, specifically Icecast/Shoutcast admin, s...
CVE-2026-100851: Exposure of Sensitive Information to an Unauthorized Actor
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...
exploitation-labs
Icecast 2.0.1 Header Overwrite — Windows 7 CVE: CVE-2004-...
Icecast Config - File Disclosure Detection
Icecast Config file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Config file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Config - File Disclosure Detection', 'description':...
Icecast Streaming Media Server Information Panel - Detect
Icecast Streaming Media Server information panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Streaming Media Server information panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...
Icecast Streaming Media Server Detection
Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...
EUVD-2005-0839
Malware in sbrugna...
EUVD-2005-0838
Malware in sbrugna...