CVE-2018-14332

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the...

CVE-2018-14332

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the...

CVE-2018-14332

CVE-2018-14332 affects Clementine Music Player 1.3.1: a NULL pointer dereference in MoodbarPipeline::NewPadCallback can cause a user-mode write access violation when opening malformed MP3 files. Technical details across connected sources pin the flaw to moodbar/moodbarpipeline.cpp Init, enabling ...

CVE-2018-14002

An integer overflow vulnerability exists in the function distribute of MP3 Coin MP3, an Ethereum token smart contract. An attacker could use it to set any user's balance...

Integer overflow

An integer overflow vulnerability exists in the function distribute of MP3 Coin MP3, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CVE-2018-14002

CVE-2018-14002 affects MP3 Coin (MP3), an Ethereum token smart contract. Impact arises from an integer overflow in the distribute function, allowing an attacker to set any user’s balance. The available documentation does not include remediation or explicit exploit details.

Boxoft WAV To MP3 Converter 1.1 Buffer Overflow Exploit

This Metasploit module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1. By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the application, a buffer is overwritten, which allows for running shellcode. This module requir...

Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Boxoft WAV to MP3 Converter v1.1 Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter...

Boxoft WAV To MP3 Converter 1.1 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Boxoft WAV to MP3 Converter v1.1 Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter...

Boxoft WAV to MP3 Converter v1.1 Buffer Overflow

This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1. By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the application, a buffer is overwritten, which allows for running shellcode. This module requires...

Webcast Replay: Preventing Vulnerability Exposure with IBM Security Bulletins

Abstract As the basis for many of IBM's enterprise products, WebSphere Application Server and its runtime often serves as the first line of defense when it comes to IT security. Learn how to ensure that you stay protected against known exploits through effective use of IBM's Security Bulletins...

mp3.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-627003 Description| Value ---|--- Affected Website:| mp3.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

ASX to MP3 Converter Remote Stack Buffer Overflow Vulnerability

ASX to MP3 Converter can convert ASX, ASF, WMA and WMV formats to mp3 conveniently, the conversion speed can be adjusted at will, and allows batch conversion of subdirectory files in a recursive manner. ASX to MP3 Converter suffers from a remote stack buffer overflow vulnerability. An attacker...

mp3.nikee.net XSS vulnerability

Open Bug Bounty ID: OBB-607688 Description| Value ---|--- Affected Website:| mp3.nikee.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mp3.niki.az XSS vulnerability

Open Bug Bounty ID: OBB-607062 Description| Value ---|--- Affected Website:| mp3.niki.az Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zortam MP3 Media Studio 23.45 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Zortam Mp3 Media Studio Local Buffer Overflow SEH Author: Kevin McGuigan Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: http://www.zortam.com/ Version: 23.45 Tested on: Windows 7 32 bit Date...

Zortam MP3 Media Studio 23.45 Buffer Overflow

!/usr/bin/python Title: Zortam Mp3 Media Studio Local Buffer Overflow SEH Author: Kevin McGuigan Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: http://www.zortam.com/ Version: 23.45 Tested on: Windows 7 32 bit Date: 12/04/2018 Vendor did not respond to advisory Fil...

Zortam MP3 Media Studio 23.45 - Local Buffer Overflow (SEH)

!/usr/bin/python Title: Zortam Mp3 Media Studio Local Buffer Overflow SEH Author: Kevin McGuigan Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: http://www.zortam.com/ Version: 23.45 Tested on: Windows 7 32 bit Date: 12/04/2018 Vendor did not respond to advisory Fil...

Zortam MP3 Media Studio 23.45 - Local Buffer Overflow (SEH)

Zortam MP3 Media Studio 23.45 - Local Buffer Overflow SEH !/usr/bin/python Title: Zortam Mp3 Media Studio Local Buffer Overflow SEH Author: Kevin McGuigan Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: http://www.zortam.com/ Version: 23.45 Tested on: Windows 7 32 b...

Denial Of Service (DoS) Through Null Pointer Dereference

libid3tag.so is vulnerable to denial of service through null pointer dereference attacks. The vulnerability occurs when parsing a malicious mp3 file that causes a null pointer to be dereferenced in the id3fieldparse function...