Downloadify Allowed Songs to be Downloaded for Free

One of the largest online music streaming services was briefly singing a different tune after learning a new Google Chrome plug-in allowed users to download copies of songs for free. Google this week pulled from its Chrome Web Store the browser extension known as Downloadify, which exploited a...

SA-CONTRIB-2013-043 - MP3 Player - Cross Site Scripting (XSS)

This module enables you to easily enable a Flash MP3 Player on a CCK FileField. The module doesn't sufficiently filter user-supplied text from mp3 filenames. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a node with an mp3 filefield wi...

Dotclear 2.4.4 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in Dotclear. CMS Dotclear has three vulnerable flash-files: swfupload.swf, playerflv.swf and playermp3.swf. File swfupload.swf it's Swfupload. I've wrote about vulnerabilities in Swfupload in November 2012...

VirtualDJ ProHome 7.3 - Local Buffer Overflow

VirtualDJ ProHome 7.3 - Local Buffer Overflow Exploit Title: VirtualDJ Pro/Home =7.3 Buffer Overflow Vulnerability Date: 23.03.2013 Exploit Author: Alexandro Sánchez Bach functionmixer.blogspot.com Vendor Homepage: http://www.virtualdj.com/ Software Link:...

Ruby Gem ldoce 0.0.2 Command Execution Vulnerability

Ruby Gem ldoce version 0.0.2 suffers from a command execution vulnerability. Remote command execution in Ruby Gem ldoce 0.0.2 Larry W. Cashdollar @larry0 3/25/2013 Ldoce Ruby Gem: Easily interface with the Longman Dictionary of Contemporary English API from Ruby: NB currently mac only as it depen...

ldoce Gem for Ruby MP3 URL Shell Metacharacter Injection Arbitrary Command Execution

ldoce Gem for Ruby contains a flaw that is triggered during the handling of a specially crafted URL or filename for MP3 files that have shell metacharacters injected in to it. This may allow a context-dependent attacker to execute arbitrary commands...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow

Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00 Build 120518 Tested on: Windows 7 SP1 my $file=...

IconCool MP3 WAV Converter 3.00 Build 120518 Buffer Overflow

Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.exe Version: v3.00 Build 120518 Tested on: Windows 7 SP1 my $file=...

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow

IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability Date: 3/24/2013 Exploit Author: G0li47h Vendor Homepage: http://www.iconcool.com Software Link: http://www.iconcool.com/insticoncoolmp3wavconverter.ex...

Shrimp net free download any music, Super simple! - Vulnerability warning-the black bar safety net

Brief description: Shrimp network is to provide high quality Music MP3 personalized recommendation, publish, P2P download services, including APE format music. Love music, love found, love to share, so like life. Shrimp on the music of thought and attitude is like! Detailed description: In shrimp...

TagScanner 5.1 - Stack Buffer Overflow (PoC)

Title: ====== TagScanner v5.1 - Stack Buffer Overflow Vulnerability Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=831 VL-ID: ===== 831 Introduction: ============= TagScanner is a multifunction program for organizing and managing your music...

WordPress Audio Player SWF Cross Site Scripting

Exploit Title: Wordpress Audio Player Plugin XSS in SWF Release Date: 31/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/audio-player.2.0.4.6.zip Vendor Homepage: http://wpaudioplayer.com/ Tested...

Free WMA to MP3 converter 1.6 - Local buffer overflow [SEH]

Exploit for windows platform in category local exploits !/usr/bin/python -w In the name of allah Title : Local buffer overflow - SEH Infected program: Free WMA to MP3 converter 1.6 Date: 30/11/2012 Exploit Author: R3ZN0V Software : www.eusing.com Download Link:...

Free WMA to MP3 converter v1.6 - Local buffer overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python -w In the name of allah Title : Local buffer overflow - SEH Infected program: Free WMA to MP3 converter 1.6 Date: 30/11/2012 Exploit Author: R3ZN0V Software : www.eusing.com Download Link:...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Design/Logic Flaw

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

CVE-2012-6044

CVE-2012-6044 affects M-Player 0.4 . A crafted MP3 file can be used by a remote attacker to cause a denial of service (crash). The entry indicates a network-exposed vulnerability with partial availability impact, and no authentication required. The provided connected documents confirm the descrip...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

A-PDF All To MP3 Converter 2.3.0 Buffer Overflow

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.2.3.0 buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.3.0 Tested on: Win7 German Date: 12/11/2012 Author: metacom details: Open the app, drag the wav file, nc ip 4444 filename = "crash.wav" junk ...