Skip to content
OpenAdvisories

Vendor

staniel359

1 known vulnerabilities.

Products

muffon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-55204

    muffon has One-click Remote Code Execution via XSS and Custom URL Handling

    muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution (RCE) vulnerability in. An attacker can exploit this issue by embedding a specially crafted `muffon://` link on any website they cont…

    staniel359 muffon