PT-2020-22522

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: cras channel remix conv create, audio thread config glob...

Sound eXchange audio editor Channel Start DoS

The vulnerability of the channelstart function in the remix.c script of the Sound eXchange audio editor is related to a serious overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2019-8355

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

PT-2019-2904

Name of the Vulnerable Software and Affected Versions SoX versions 14.4.2 Description The issue is related to an integer overflow in the channels start function of the SoX audio editor, which can lead to a heap-based buffer overflow. This can be exploited by a remote attacker to cause a denial of...

ethers-cli (>=3.0.4, <=4.0.0), ethers-meow (>=0.1.1, <=0.1.3) +4 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=2.3.1, <=2.4.0)

ethereumjs-vm NPM version =2.3.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - newstudio-lib 0.1.0 - remix-solidity 0.0.1 Source cves: CVE-2018-19183 Source advisory: OSV:GHSA-2MW7-WGGM-M6W3...

DJ Remix Music - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DJ Remix Music published at the 'play' market has multiple vulnerabilities...

CVE-2008-5393

UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...

WP Comment Remix 1.4.3 - Remote SQL Injection Exploit

No description provided by source. ?php / WP Comment Remix 1.4.3 SQL Injection Proof of Concept By g30rg3x g30rg3xatchxsecuritydotorg Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a...

Design/Logic Flaw

UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...

CVE-2008-5393

UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...

CVE-2008-5393: Undefined Security Weakness

UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...

CVE-2008-5393

CVE-2008-5393 describes a vulnerability in the UPR-Kernel used by Ubuntu Privacy Remix (UPR) prior to 8.04_r1. The issue concerns kernel support for mounting RAID arrays, which could allow remote attackers to bypass isolation by reading from or writing to RAID arrays. Multiple sources (NVD, RH ad...

Cross site scripting

Cross-site scripting XSS vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 replytotext, 2 quotetext, 3 originallypostedby, 4 sep, 5 maxtags, 6 tagsep, 7 tagheadersep, 8 taglabel, and 9...

CVE-2008-4732

SQL injection vulnerability in ajaxcomments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4733

Cross-site scripting XSS vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 replytotext, 2 quotetext, 3 originallypostedby, 4 sep, 5 maxtags, 6 tagsep, 7 tagheadersep, 8 taglabel, and 9...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the wpcrdooptionspage function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcrhiddenforminput parameter...

Sql injection

SQL injection vulnerability in ajaxcomments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4734

Cross-site request forgery CSRF vulnerability in the wpcrdooptionspage function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcrhiddenforminput parameter...

CVE-2008-4732

SQL injection vulnerability in ajaxcomments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4733

Cross-site scripting XSS vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 replytotext, 2 quotetext, 3 originallypostedby, 4 sep, 5 maxtags, 6 tagsep, 7 tagheadersep, 8 taglabel, and 9...