MAL-2025-18699 Malicious code in down-lo-ad-now-zip-mp3-52887-pawn-hearts-4duor-thjpkj (npm)

The package down-lo-ad-now-zip-mp3-52887-pawn-hearts-4duor-thjpkj was found to contain malicious code...

MAL-2025-14247 Malicious code in alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu (npm)

The package alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu was found to contain malicious code...

MAL-2025-26788 Malicious code in mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp (npm)

The package mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp was found to contain malicious code...

MAL-2025-18698 Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm)

The package down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck was found to contain malicious code...

MAL-2025-41015 Malicious code in zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr (npm)

The package zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr was found to contain malicious code...

MAL-2025-20540 Malicious code in file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj (npm)

The package file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj was found to contain malicious code...

MAL-2025-20539 Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm)

The package file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb was found to contain malicious code...

MAL-2025-26793 Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)

The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...

MAL-2025-15134 Malicious code in ava-ilable-down-load-mp3-today-34783-leave-to-remain-ns5pr-lhhazn (npm)

The package ava-ilable-down-load-mp3-today-34783-leave-to-remain-ns5pr-lhhazn was found to contain malicious code...

MAL-2025-14255 Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)

The package alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy was found to contain malicious code...

MAL-2025-14253 Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)

The package alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun was found to contain malicious code...

MAL-2025-20545 Malicious code in file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm (npm)

The package file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-488186-gulp-o3tds-pctzbw (npm)

The package zip-mp3-a-lbum-do-wnload-new-488186-gulp-o3tds-pctzbw was found to contain malicious code...

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...

CVE-2024-30530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

CVE-2024-6083

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack...

CVE-2024-13157

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Podcast RSS Feed in all versions up to, and including, 5.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

CVE-2024-56266

Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through = 5.8...

CVE-2024-10268

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaaraudioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplie...