maotoumao MusicFreeDesktop Request Forwarder information disclosure

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Etkilenen sürümler1 yazılım

Kaynaklar8 kaynak

• CVE.org kaydı
• NVD kaydı
• vuldb.com/cve/CVE-2026-118578 Üçüncü taraf
• vuldb.com/submit/1025071 Üçüncü taraf
• github.com/maotoumao/MusicFreeDesktop/issues/444 İstismar kodu ya da analiz
• vuldb.com/vuln/428017 Diğer
• vuldb.com/vuln/428017/cti Diğer
• github.com/maotoumao/MusicFreeDesktop Diğer

Kayıt geçmişi

1. 29 Eki 2026 01:45Yayımlandı

İlgili açıklar

• 6,3 CVE-2026-118577maotoumao MusicFreeDesktop Request Forwarder server-side request forgery
• 6,0 CVE-2026-118666GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
• 6,9 CVE-2026-118662Vite: `server.fs.deny` bypassed with queries
• 9,4 CVE-2026-63190FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS
• 5,7 CVE-2026-105617PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule
• 5,7 CVE-2026-105616PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting