WordPress Soundcloud Is Gold Plugin <= 2.5.1 is vulnerable to Broken Access Control

Software Soundcloud Is Gold Type Plugin Vulnerable versions = 2.5.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32586 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cf1dacc0daae Credits István Márton Required...

SoundCloud Tackles DoS, Account Takeover Issues

Online music platform SoundCloud, which can be thought of as an audio-based YouTube for music creators, has addressed several security bugs in its APIs that could lead to denial-of-service DoS or account takeover via credential-stuffing. SoundCloud recently sold a $75 million stake to satellite...

Android Keyboard App Could Swindle 40M Users Out of Millions

Researchers are warning users to delete a popular Android keyboard app that, once downloaded, makes unauthorized purchases of premium digital content. Google told Threatpost it has removed the app from its Google Play marketplace – but researchers say it was downloaded on at least 40 million phon...

Design/Logic Flaw

The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=getsoundcloudplayer id parameter...

CVE-2015-9420

The CVE concerns the WordPress plugin “soundcloud-is-gold” (pre-2.3.2). The vulnerability is an XSS via wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter, leading to unauthenticated reflected XSS. Affected versions are plugin versions before 2.3.2; the issue is caused by improper ...

CVE-2015-9420

The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=getsoundcloudplayer id parameter...

openSUSE: Security Advisory for vlc (openSUSE-SU-2019:1909-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 28 : mozilla-privacy-badger (2018-bb965553f9)

Fixed security issues with HTML5 local storage tracking detection as well as SoundCloud widget replacement. Thanks again to Cure53 for discovering and reporting these vulnerabilities. - Improved Facebook link unwrapping; now enabled on the Facebook Onion domain - Improved translations Italian,...

Fedora 27 : mozilla-privacy-badger (2018-d5d8819190)

Fixed security issues with HTML5 local storage tracking detection as well as SoundCloud widget replacement. Thanks again to Cure53 for discovering and reporting these vulnerabilities. - Improved Facebook link unwrapping; now enabled on the Facebook Onion domain - Improved translations Italian,...

Reverb.com: Persistent XSS in https://sandbox.reverb.com/item/

Description I found a Persistent XSS in a listing page. The flaw is in the SoundCloud link that the listing owner can attachThe parameter is called productsoundcloudlinkattributeslink. There's no encoding on the user input and it looks like there's only client-side validation. PoC The payload:...

SoundCloud Detection

Binary data 9360.prm...

SoundCloud Detection

Binary data 9361.prm...

SoundCloud Detection

Binary data 9362.prm...

SoundCloud - Music & Audio - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SoundCloud - Music & Audio published at the 'play' market has multiple vulnerabilities...

My Cloud Player for SoundCloud - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Cloud Player for SoundCloud published at the 'play' market has multiple vulnerabilities...

SoundCloud Pulse: for creators - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application SoundCloud Pulse: for creators published at the 'play' market has multiple vulnerabilities...

WordPress SoundCloud Is Gold Plugin <= 2.3.1 - Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

SoundCloud Is Gold <= 2.3.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The SoundCloud Is Gold WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

Soundcloud Is Gold <= 2.1 - Cross-Site Scripting (XSS)

The SoundCloud Is Gold WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2012-6624

Cross-site scripting XSS vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter in a soundcloudisgoldplayerpreview action to wp-admin/admin-ajax.php...