2393 matches found
CVE-2025-48163
CVE-2025-48163 is a Reflected Cross-Site Scripting vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support. Affected versions are up to 3.5.4; the CVSS v3.1 base score is 7.1 (HIGH). The issue arises from improper input neutralization during web page gene...
CVE-2025-48163 WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support lbg-audio8-html5-radio-ads allows Reflected XSS.This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast a...
CVE-2025-53205 WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Radio Player Shoutcast & Icecast lbg-audio4-html5-shoutcast allows Reflected XSS.This issue affects Radio Player Shoutcast & Icecast: from n/a through = 4.4.7...
CVE-2025-53205
The CVE-2025-53205 entry refers to a Reflected XSS in LambertGroup Radio Player Shoutcast & Icecast (WordPress plugin lbg-audio4-html5-shoutcast) up to version 4.4.7. Root cause: Improper neutralization of input during web page generation. Impact: potential execution of malicious scripts in a use...
CVE-2025-53205 WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Radio Player Shoutcast & Icecast allows Reflected XSS. This issue affects Radio Player Shoutcast & Icecast: from n/a through 4.4.7...
CVE-2025-53564
CVE-2025-53564: LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon (<= 2.5) suffers Reflected XSS due to improper input neutralization during page generation. Affected versions are
CVE-2025-53564 WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbgradioplayeraddonvisualcomposer allows Reflected XSS.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a...
CVE-2025-53564 WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbgradioplayeraddonvisualcomposer allows Reflected XSS.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a...
PT-2025-33921 · Lambertgroup · Lambertgroup Shout - Html5 Radio Player With Ads - Shoutcast/Icecast Support
Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support versions through 3.5.4 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site...
PT-2025-33985 · Unknown +1 · Wpbakery Page Builder +1
Name of the Vulnerable Software and Affected Versions: LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon versions through 2.5 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows f...
WordPress plugin HTML5 Radio Player - WPBakery Page Builder Addon 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
WordPress plugin Radio Player Shoutcast 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
PT-2025-33971 · Lambertgroup · Lambertgroup Radio Player Shoutcast & Icecast
Name of the Vulnerable Software and Affected Versions: LambertGroup Radio Player Shoutcast & Icecast versions through 4.4.7 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site Scripting condition. This allows f...
Markov Chain-Based Model of Blockchain Radio Access Networks
Security has always been a priority, for researchers, service providers and network operators when it comes to radio access networks RAN. One wireless access approach that has captured attention is blockchain enabled RAN B-RAN due to its secure nature. This research introduces a framework that...
SUSE CVE-2025-38606
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif-ar during beacon miss During beacon miss handling, ath12k driver iterates over active virtual interfaces vifs and attempts to access the radio object ar via arvif-deflink-ar...
USN-7703-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...
CVE-2025-38606
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif-ar during beacon miss During beacon miss handling, ath12k driver iterates over active virtual interfaces vifs and attempts to access the radio object ar via arvif-deflink-ar...
UBUNTU-CVE-2025-38606
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif-ar during beacon miss During beacon miss handling, ath12k driver iterates over active virtual interfaces vifs and attempts to access the radio object ar via arvif-deflink-ar...
CVE-2025-38606
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif-ar during beacon miss During beacon miss handling, ath12k driver iterates over active virtual interfaces vifs and attempts to access the radio object ar via arvif-deflink-ar...
CVE-2025-38606
The CVE-2025-38606 entry describes a Linux kernel wireless issue in the ath12k driver where beacon miss handling dereferences arvif->deflink->ar before a vdev has been created, leaving arvif->ar uninitialized for some P2P/vif scenarios. The identified root cause is that arvif is only lin...