ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

CVE-2019-9766

CVE-2019-9766 Exploiting the buffer overflow vulnerability in Free MP3 CD Ripper version 2.6, by constructing a specially crafted MP3 file, when the attacker uses the player to play the audio file, the audio file bait exploits the buffer overflow vulnerability to execute arbitrary code...

CVE-2019-9766

CVE-2019-9766 Do my best About CVE Free MP3 CD Ripper It is a switcher between .mp3 files and other filetype converting a file. Bug According to the NVD we can find that, in the vision 2.6 there is a Stack-based Overflow in the Buffer Area. So we can create a Poc for it. Filetype changed to .mp3...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★ Description CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p Example python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u...

CVE-2026-111967

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with Contributor-level access and above to inject arbitrary JavaScript that executes when another user, such as an administrat...

EUVD-2026-111722

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with Contributor-level access and above to inject arbitrary JavaScript that executes when another user, such as an administrat...

CVE-2026-111967

The MP3 Audio Player WordPress plugin (versions 5.9 through 5.15 ) contains a vulnerability where it fails to escape an audio player shortcode attribute before outputting it into an HTML attribute. This allows users with Contributor-level access and above to perform a Stored Cross-Site Scripting ...

CVE-2026-111967 MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode Attribute

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with Contributor-level access and above to inject arbitrary JavaScript that executes when another user, such as an administrat...

WordPress MP3 Audio Player plugin 5.9-5.15 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Hexxed BitHeadz in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions 5.9-5.15...

PT-2026-127839

The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute, allowing users with Contributor-level access and above to inject arbitrary JavaScript that executes when another user, such as an administrat...

Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0de6f2e8761f78435572cd45fcf6c33ce59d7fa48330a3ed734f2e2760c391b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18001 Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed92a17b453fc61e1425415b02c40469a9f72a1839d6a4a004d026aa668f634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 082189b6a0a6bb4bf5dd047752847d649a05cbcb3b2be4f37b4afc4fad9ff8ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab30295e4c047eb1dd313b68001538fdd727e2bd49f3aac87fe67d10e9236b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4c7c4064762128656fff603f846e8eca4e3458cb6bae2bee941f7f63b816af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...