CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: Vulnerabilidad de Carga de Archivos en Agent DVR Información Descripción En iSpyConnect.com Agent DVR 5.1.6.0, hay una falta de verificación del tipo de archivo para las cargas de archivos de sonido. Esto permite que un usuario autenticado cargue cualquier tipo de archivo a través...

whisper-pair

Escáner de Vulnerabilidades de Fast Pair Herramienta de investigación de seguridad para detectar accesorios Bluetooth vulnerables a ataques WhisperPair 🌐 Investigación WhisperPair • 📦 Instalación • 🚀 Uso • 🔬 Detalles Técnicos ⚠️ Aviso Legal Esta herramienta es únicamente para pruebas de seguridad...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Web Codecs component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

CVE-2026-96774

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

EUVD-2026-85761

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774

A vulnerability exists in the SPON Communications IP Network Audio Device XC-9603 (version 1.2.3_20181106 Build 107). The flaw impacts the loadCfg function within the /ini/sys_cfg.txt file of the Configuration File Download component. This issue allows for information disclosure via a remote atta...

UBUNTU-CVE-2026-93280

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

CVE-2026-93280

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

Linux Distros Unpatched Vulnerability : CVE-2026-93808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: caiaq: validate EP1 reply lengths usbep1commandreplydispatch uses buf0 as a command byte and then reads command-specific fixed items from the...

CVE-2026-89944

A flaw was found in the Linux kernel's Audio System on Chip ASoC High Definition Audio Codec hdachda component. During the device probing process, a reference to an HDA link is acquired but not properly released if the ASoC component registration fails. This oversight leads to a reference count...

CVE-2026-93841

A flaw was found in vLLM. This memory corruption vulnerability exists in the Triton bincountkernel, where prompt token identifiers IDs are used to index a bitset without proper bounds checking against the vocabulary size. A remote attacker can exploit this by submitting multimodal audio requests...

linux-kernel-codex-harness

Kernel Codex Harness 한국어 | English Herramienta de investigación · Importación original: 3 de abril de 2026 · Revisión de documentación: 11 de julio de 2026 Filosofía central — Señal externa Deja que las observaciones reproducibles fuera de la inferencia del modelo guíen la atención; nunca confund...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-054081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054081 advisory. BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in...

CVE-2025-36911-exploit

WhisperPair CLI de Python Herramienta de explotación rápida para CVE-2025-36911 en Python para probar nuestro equipo Autor: Sébastien Dudek @FlUxIuS @ Penthertz Créditos: whisperpair.eu por el descubrimiento y esta bonita APK de @ZalexDev que acortó el tiempo de implementación wpair-app ⚠️ Aviso...

firefox: thunderbird: Use-after-free in the Audio/Video: Web Codecs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Web Codecs component...

wpair-app

WPair Escáner y herramienta de investigación de vulnerabilidades CVE-2025-36911 p. ej., WhisperPair Características • Instalación • Uso • Cómo funciona • Vulnerabilidad • Créditos Descargo de responsabilidad Esta aplicación es una implementación independiente creada por @ZalexDev a título persona...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...