mp3-search.link XSS vulnerability

Open Bug Bounty ID: OBB-403291 Description| Value ---|--- Affected Website:| mp3-search.link Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

[SECURITY] Fedora 26 Update: lame-3.100-1.fc26

LAME is an open source MP3 encoder whose quality and speed matches commercial encoders. LAME handles MPEG1,2 and 2.5 layer III encoding with both constant and variable bitrates...

ldoce Gem Arbitrary Command Execution

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

GHSA-G266-3CRH-H7GJ ldoce Gem Arbitrary Command Execution

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

ASX to MP3 Converter Buffer Error Vulnerability

ASX to MP3 Converter is a set of conversion tools capable of converting music in ASX, ASF, WMA and WMV formats to MP3 format. A buffer overflow vulnerability exists in ASX to MP3 Converter version 3.1.3.7.2010.11.05. An attacker can exploit this vulnerability to cause a denial of service or execu...

youtubeplaylist-mp3.com XSS vulnerability

Vulnerable URL: http://youtubeplaylist-mp3.com/?v=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72001 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

CVE-2017-15221

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

Buffer overflow

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

CVE-2017-15221

CVE-2017-15221 affects ASX to MP3 converter 3.1.3.7.2010.11.05, where a crafted M3U file triggers a buffer overflow in the ASX to MP3 conversion process. Public materials in connected docs describe a stack-based overflow enabling potential arbitrary code execution or denial of service, with explo...

CVE-2017-15221

ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324...

ASX To MP3 3.1.3.7 Buffer Overflow

Exploit Title: Buffer Overflow via crafted malicious .m3u file Exploit Author: Parichay Rai Tested on: XP Service Pack 3 CVE : CVE-2017-15221 Description ------------ A buffer overflow Attack possible due to improper input mechanism Proof of Concept ---------------- !/usr/bin/python This exploit...

ASX to MP3 3.1.3.7 - '.m3u' Local Buffer Overflow

Exploit Title: Buffer Overflow via crafted malicious .m3u file Exploit Author: Parichay Rai Tested on: XP Service Pack 3 CVE : CVE-2017-15221 Description ------------ A buffer overflow Attack possible due to improper input mechanism Proof of Concept ---------------- !/usr/bin/python This exploit...

ASX to MP3 3.1.3.7 - .m3u Local Buffer Overflow

ASX to MP3 3.1.3.7 - .m3u Local Buffer Overflow Exploit Title: Buffer Overflow via crafted malicious .m3u file Exploit Author: Parichay Rai Tested on: XP Service Pack 3 CVE : CVE-2017-15221 Description ------------ A buffer overflow Attack possible due to improper input mechanism Proof of Concept...

ASX to MP3 converter < 3.1.3.7 - Stack Overflow (DEP Bypass) Exploit

Exploit for windows platform in category local exploits import struct,sys head =''' REF HREF="mms://site.com/ach/music/smpl/LACA-05928-002-tes''' offset 17375 junk = "A" 17375 0x1003df8e 0x774e1035 EIP="\x36\x10\x4e\x77" adjust="A" 4 def createropchain: ropgadgets = 0x73dd5dce, POP EAX RETN...

ASX To MP3 Converter Stack Overflow

import struct,sys head =''' REF HREF="mms://site.com/ach/music/smpl/LACA-05928-002-tes''' offset 17375 junk = "A" 17375 0x1003df8e 0x774e1035 EIP="\x36\x10\x4e\x77" adjust="A" 4 def createropchain: ropgadgets = 0x73dd5dce, POP EAX RETN MFC42.DLL 0x5d091368, ptr to &VirtualProtect IAT COMCTL32.dll...

LAME Null Pointer Reference Denial of Service Vulnerability

LAME is an MP3 encoder. A security vulnerability in LAME libmp3lame/mpglibinterface.c hipdecodeinit allows remote attackers to exploit the vulnerability by submitting a special mpg file, tricking the user into parsing it, and performing a denial of service attack...

ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow (DEP Bypass)

ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow DEP Bypass import struct,sys head =''' REF HREF="mms://site.com/ach/music/smpl/LACA-05928-002-tes''' offset 17375 junk = "A" 17375 0x1003df8e 0x774e1035 EIP="\x36\x10\x4e\x77" adjust="A" 4 def createropchain: ropgadgets = 0x73dd5dce, POP EA...

CVE-2017-15045

LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fillbuffer in libmp3lame/util.c, related to lameencodebuffersamplet in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410...

mp3.yeni.pro XSS vulnerability

Vulnerable URL: http://mp3.yeni.pro/index.php?mod=search=13'"6 9 canli 90 lar=CAoQAA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

mp3-search.me XSS vulnerability

Vulnerable URL: http://mp3-search.me/download.php?q=13'"76+Harivansh+Rai+Bachchan+76+Aa+Sone+Se+Pehle=UlrjTQsa-mQ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...