2463 matches found
CVE-2019-9766
CVE-2019-9766 Utilizza la vulnerabilità di buffer overflow presente in Free MP3 CD Ripper 2.6 per creare un file MP3 appositamente realizzato; quando la vittima lo riproduce con il lettore, il file audio esca sfrutta la vulnerabilità di buffer overflow per eseguire codice arbitrario. Riproduzione...
CVE-2019-9766
CVE-2019-9766 Farei o meu melhor Sobre o CVE Free MP3 CD Ripper É um conversor entre arquivos .mp3 e outros tipos de arquivo convertendo um arquivo. Bug De acordo com o NVD, podemos ver que, na vision 2.6, há um Stack-based Overflow na Área de Buffer. Então podemos criar um Poc para isso. O tipo ...
ssrf-sheriff
SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...
CVE-2024-7856
CVE-2024-7856 ★ CVE-2024-7856 PoC di eliminazione arbitraria di file ★ Descrizione CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar = 5.7.0.1 – Mancanza di autorizzazione per l'eliminazione arbitraria di file da parte di utenti autenticati Subscriber+ Ricercatore ...
CVE-2026-51274
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51275
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51254
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51251
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51252
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
EUVD-2026-49858
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata...
CVE-2026-51252
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51251
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51275
...
CVE-2026-51252
The connected records identify a concrete issue: ESP32-audioI2S 3.4.5 contains a buffer overflow in MP3Decoder::UnpackSFMPEG1 caused by missing input validation on attacker-controlled MP3 metadata. This is a vulnerability in the MP3 decoding path; exploitation details are not provided in the docu...
CVE-2026-51254
CVE-2026-51254 is rejected/not used; this record does not represent an active vulnerability.
CVE-2026-51275
The CVE-2026-51275 record is supported by connected sources indicating a concrete issue in schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the ID3v2 APIC frame parsing within audiolib, caused by missing length validation of the APIC frame size. This leads t...
EUVD-2026-49857
Schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode function of the MP3 decoder due to missing size validation on untrusted mainDataBegin and nSlots values...