88 matches found
CVE-2024-52473
CVE-2024-52473 affects the WordPress plugin HTML5 Lyrics Karaoke Player (versions ≤ 2.4). Root cause is improper input neutralization during web page generation, enabling Reflected XSS. Exploitation details are not specified in the provided documents; no patch/version fix is publicly documented. ...
CVE-2024-52473 WordPress HTML5 Lyrics Karaoke Player plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through 2.4...
CVE-2024-52473 WordPress HTML5 Lyrics Karaoke Player plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player html5-lyrics-karaoke-player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through = 2.4...
WordPress HTML5 Lyrics Karaoke Player plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin HTML5 Lyrics Karaoke Player versions = 2.4...
WordPress HTML5 Lyrics Karaoke Player Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)
Software HTML5 Lyrics Karaoke Player Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52473 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd318a16984e Credits João Pedro S Alcântara...
[SECURITY] Fedora 38 Update: qmmp-2.1.2-4.fc38
This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support MPEG1 layer 2/3 support Ogg Vorbis support native FLAC support WavePack support ModPlug support PCM WAVE support CD...
Fedora: Security Advisory for qmmp (FEDORA-2023-a5e10b188a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
What is AI good at (and what the heck is it, actually), with Josh Saxe: Lock and Code S04E04
In November of last year, the AI research and development lab OpenAI revealed its latest, most advanced language project: A tool called ChatGPT. ChatGPT is so much more than "just" a chatbot. As users have shown with repeated testing and prodding, ChatGPT seems to "understand" things. It can give...
cajunlyrics.com Cross Site Scripting vulnerability OBB-1462561
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Drake Lyrics Used as Calling Card in Malware Attack
A hacker with the handle “Master X” leverages a PowerShell script that contains a reference to singer-songwriter Drake lyric’s “Kiki Do You Love Me” and ultimately delivers a malicious payload to its victims. The campaign is email based; with missives containing a malicious PowerPoint attachment...
Lyrist - id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Lyrist - Music Lyrics Script - SQL Injection Exploit Author: Meisam Monsef - email protected - @meisamrce Vendor Homepage: https://www.codester.com/items/7250/lyrist-music-lyrics-script Version: All Version Exploit :...
Lyrist - id SQL Injection
Lyrist - id SQL Injection Exploit Title: Lyrist - Music Lyrics Script - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/7250/lyrist-music-lyrics-script Version: All Version Exploit :...
Lyrist - 'id' SQL Injection
Exploit Title: Lyrist - Music Lyrics Script - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/7250/lyrist-music-lyrics-script Version: All Version Exploit :...
Lyrist SQL Injection
Exploit Title: Lyrist - Music Lyrics Script - SQL Injection Date: 2018-05-26 Exploit Author: Meisam Monsef - [email protected] - @meisamrce Vendor Homepage: https://www.codester.com/items/7250/lyrist-music-lyrics-script Version: All Version Exploit :...
Justin Bieber Lyrics Quiz - Runtime privilege escalation, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Justin Bieber Lyrics Quiz published at the 'play' market has multiple vulnerabilities...
MUKE Lyrics Translator (Free) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MUKE Lyrics Translator Free published at the 'play' market has multiple vulnerabilities...
Lyrics Mania - Music Player - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Lyrics Mania - Music Player published at the 'play' market has multiple vulnerabilities...
Violetta Lyrics - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Violetta Lyrics published at the 'play' market has multiple vulnerabilities...
Lyrics Script 'search_results.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31437/info Lyrics Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...
Blekko Challenges Google, Yahoo, Bing for Search Engine Share
After Google and Bing, Blekko, a new search engine, has officially opened its doors to welcome us. Developers guarantee accurate search results while leaving behind spammers. Results are displayed from high quality sites with rich content. The intelligent search engine, Blekko, displays search...