Lucene search
K

8 matches found

NVD
NVD
added 2026/03/20 3:15 a.m.1 views

CVE-2026-32889

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS0.00023EPSS
Exploits1References4
vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.3 views

failing-line (=0.0.1), mp3s (=0.0.0) +3 more potentially affected by unknown CVE via findall (=0.0.4)

findall NPM version =0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line =0.0.1 - mp3s =0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

5.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in mp3s (npm)

The package mp3s was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-26813 Malicious code in mp3s (npm)

The package mp3s was found to contain malicious code...

7.2AI score
Exploits0
hackapp
hackapp
added 2016/04/01 9:14 a.m.11 views

SingPlay: Karaoke your MP3s - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application SingPlay: Karaoke your MP3s published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2008/09/11 12:0 a.m.27 views

dynamicmp3-xss.txt

Author : Xylitol Contact : n/a Vendor : benjamin kuz www.ben.ursux.com Version: 2.0.1 D0rks : dynamic MP3 lister 2.0.1 by benjamin kuz :: netscape users click here Public release vulnz: 10/09/08 Impact: low Stop lammer Dynamic MP3 Lister 2.0.1 1. Description: Dynamic MP3 Lister is a quick, easy w...

7.4AI score
Exploits0
Gentoo Linux
Gentoo Linux
added 2005/11/06 12:0 a.m.28 views

GNUMP3d: Directory traversal and XSS vulnerabilities

Background GNUMP3d is a streaming server for MP3s, OGG vorbis files, movies and other media formats. Description Steve Kemp reported about two cross-site scripting attacks that are related to the handling of files CVE-2005-3424, CVE-2005-3425. Also reported is a directory traversal vulnerability...

5CVSS5.9AI score0.01258EPSS
Exploits1
Packet Storm
Packet Storm
added 2005/07/02 12:0 a.m.18 views

ashleyDoS.txt

Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...

7.4AI score
Exploits0
Rows per page
Query Builder