444 matches found
MAL-2025-14250 Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)
The package alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc was found to contain malicious code...
MAL-2025-14255 Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)
The package alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy was found to contain malicious code...
CVE-2023-28885
The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...
CVE-2007-6718
MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...
MAL-2024-9382 Malicious code in mp3-file-zip-d-ownload-33971-the-imagination-stage-ar0bb-cvzjxl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d397cb1db7e38b452c53b76a84ba968b5f74923158192a310862474b0bf7b0df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9386 Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7e81cbd6ad8ee7eb04588e6fec967a31ee4e9528bf73c5c1c3e5f53565645f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9377 Malicious code in mp3-do-wnload-file-to-day-273202-shadow-of-fear-t2vwz-niymvj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ae460e22257b2e986bf08dcb67cb44de7a372e5e84275e6896a9ecc6818cb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9384 Malicious code in mp3-file-zip-d-ownload-7678-new-york-dolls-7j7ir-rschdh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbc78a4fba418d930119feafe94e0bc44dc037b992a57ad7c81572d72041097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9383 Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce58c2ac7b1825c26b2656020f588d8a223c04953287197e776979cc4f4f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9327 Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9328 Malicious code in alb-um-availa-ble-zip-mp3-file-30506-i-feel-alright-898re-atdkuh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 301aedb3c629f2045611e487e9d753ff50c0a6fc1da4ee93c01ab32ee0cff0a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9329 Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4008f42b5bc2b6647cc2d9e297edb68f60da9ce6c5a20e62b44cb70616a8a6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9331 Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896431589d1851d65f8365d770dff71aa63f823917838fd5734b3ee77fe7f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-20762 Adobe Animate MP3 File parsing unitialized heap memory corruption
Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
CVE-2024-20762 Adobe Animate MP3 File parsing unitialized heap memory corruption
Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
October CMS Cross-site Scripting vulnerability
Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3...
CVE-2023-25365
Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3...
PT-2024-12056 · Unknown · October Cms
Name of the Vulnerable Software and Affected Versions: October CMS version 3.2.0 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the file type .mp3. Recommendations: For October CMS version 3.2.0, update to a version that fixes this issue to prevent...
October CMS Code Issues Vulnerabilities
October CMS is an open source content management system CMS based on PHP and the Laravel web application framework. A code issue vulnerability exists in October CMS version v.3.2.0, which stems from the presence of a cross-site scripting vulnerability that allows a local attacker to execute...