147 matches found
Navidrome <=0.54.5 - Authentication Bypass in Subsonic API
Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...
EUVD-2018-12794
Malware in sbrugna...
EUVD-2018-6583
Malware in sbrugna...
EUVD-2017-18349
Malware in sbrugna...
EUVD-2018-6584
Malware in sbrugna...
EUVD-2018-6585
Malware in sbrugna...
EUVD-2018-17777
Malware in sbrugna...
EUVD-2017-18348
Malware in sbrugna...
EUVD-2018-20876
Malware in sbrugna...
EUVD-2018-7754
Malware in sbrugna...
EUVD-2008-2386
Malware in sbrugna...
EUVD-2017-18350
Malware in sbrugna...
EUVD-2018-6582
Malware in sbrugna...
EUVD-2023-3317
Malicious code in bioql PyPI...
EUVD-2021-8696
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-21399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic AP...
VulnCheck KEV: CVE-2025-27112
Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...
CVE-2023-51442
Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subsonic endpoint, allowing for authentication bypass. This exploit enables unauthorized access to any known account by utilizing a JSON Web Token JWT signed wit...
CVE-2021-21399
Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...
FreeBSD : Navidrome -- Authentication bypass in Subsonic API (5ca2cafa-1f24-11f0-ab07-f8f21e52f724)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5ca2cafa-1f24-11f0-ab07-f8f21e52f724 advisory. Deluan reports: In certain Subsonic API endpoints, authentication can be bypassed by using a non-existe...