4913 matches found
CVE-2026-104811
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...
CVE-2026-104673
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...
CVE-2026-104673
The Sonaar MP3 Audio Player for Music, Radio & Podcast WordPress plugin (versions n/a through 5.14.2 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability could allow an attacker to execut...
CVE-2026-104673 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...
EUVD-2026-92318
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.14.2...
CVE-2026-104811
The Mitel MiVoice Office 400 is vulnerable to remote code execution due to an improper file type validation flaw in the Music on Hold functionality. Located in the web portal on TCP port 443 (Configuration → Services), the application fails to properly restrict uploaded files to the intended WAV ...
EUVD-2026-92305
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...
CVE-2026-104811 Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...
CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV
요약 macOS Music 및 TV 앱이 안전하지 않은 이름 변경rename을 수행하여 사용자의 TCC.db에 대한 완전한 제어권을 얻음으로써 FDAFull Disk Access를 획득합니다. 해당 버그를 각 앱에 대해 별도 티켓으로 신고했습니다. 해당되는 경우 병합해 주세요. 근본적인 문제는 이러한 앱들이 FDA를 가지고 있지만 파일 작업을 검증sanitize하지 못한다는 점입니다. 익스플로잇 설명 Music과 TV는 이 점에서 거의 동일하며, 경로만 다릅니다. 이후부터는 Music을 예로 사용하겠습니다. TV의 경우 익스플...
QNAP Music Station < 5.4.0 - Authentication Bypass
An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...
Lyrion Music Server <= 9.2.0 - Cross-Site Scripting
Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...
DC30-Badge-Challenge-Writeup
DC30-Badge-Challenge-Writeup Table of Contents 소개 도전 과제 1부: 메모 수집 도전 과제 2부: YИИEႱ에게 전화 걸기 도전 과제 2A: 앨리스 도전 과제 2B: 밥 도전 과제 2C: 캐럴 도전 과제 2D: 댄 도전 과제 2E: 이브 도전 과제 2F: 트레버 도전 과제 3부: 마지막 실마리 컨퍼런스에서 전화기를 놓쳤다면? 뒤돌아보며 소개 안녕하세요! 저는 Pete입니다 - 일명 Kybr - 그리고 이것은 DEF CON 30 배지 챌린지에 대한 제 공략기입니다. 올해 챌린지는 음악과 해커...
Joomla! Component Music Manager - Local File Inclusion
A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...
[SECURITY] Fedora 45 Update: rhythmbox-3.5.0-2.fc45
Rhythmbox is an integrated music management application based on the powerful GStreamer media framework. It has a number of features, including an easy to use music browser, searching and sorting, comprehensive audio format support through GStreamer, Internet Radio support, playlists and more...
[SECURITY] Fedora 45 Update: pragha-1.3.3-36.fc45
Pragha is is a lightweight GTK+ music manager that aims to be fast, bloat-fre e, and light on memory consumption. It is written completely in C and GTK+. Pragha is a fork of Consonance Music Manager, discontinued by the original author...
CVE-2026-93624
Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...
CVE-2026-93624 WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Music Player for WooCommerce = 1.9.1 versions...
