kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

BLUE-SPY

BLUE-SPY - Fast Pair 脆弱性調査ツール セキュリティ免責事項と法的警告 ⚠️ 本ソフトウェアは、認可されたセキュリティ研究および倫理的なテストのみを目的としています。⚠️ このツールを、あなたが所有していない、または明示的な書面による許可を得ていないデバイスに対して不正に使用することは 違法 であり、以下の結果を招く可能性があります。 世界各国のコンピュータ詐欺および不正使用防止法（CFAA）および類似の法律に基づく刑事訴追 プライバシー侵害および不正アクセスに対する民事訴訟 盗聴罪 重大な法的・金銭的制裁...

SUSE CVE-2026-74682

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...

CVE-2026-64601

The CVE-2026-64601 issue affects the Linux kernel ALSA component for the us144mkii driver. In capture_urb_complete(), usb_anchor_urb() is invoked on every completion callback even though the URB was already anchored during initial submission (tascam_trigger_start()). This redundant anchoring corr...

Exploit for CVE-2025-36911

BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY...

Exploit for CVE-2025-36911

ZWhisper for Linux CVE-2025-36911 WhisperPair Vulnerabilit...

EUVD-2018-16895

Malware in sbrugna...

EUVD-2017-17270

Malware in sbrugna...

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-325912429

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

webkitgtk: the video in a webRTC call may be interrupted if the audio capture gets interrupted

A vulnerability was found in WebKitGTK. This issue occurs due to a logic issue in video self-preview feature in a webRTC call, which can be interrupted if the user answers a phone call or the audio capture is interrupted. This flaw allows a remote attacker to perform a denial of service attack...

CVE-2019-3948

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R an...

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

Apple has released iOS and iPadOS updates to address two security issues, one of which could have allowed a user's passwords to be read out aloud by its VoiceOver assistive technology. The vulnerability, tracked as CVE-2024-44204, has been described as a logic problem in the new Passwords app...

CVE-2024-44207

This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated...

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to 18.0.1 and iPadOS prior to 18.0.1, which stems from an audio message...

Dahua Security Cameras Missing Authentication for Critical Function (CVE-2019-3948)

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH- SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R a...

CVE-2022-33301

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...

Memory corruption

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...

CVE-2022-33301

CVE-2022-33301 is a memory corruption issue in Qualcomm audio components stemming from incorrect type conversion/cast during audio playback/capture when a crafted address is sent over AGM IPC to AGM. Affected area is Qualcomm chipsets’ audio handling; root cause is improper type handling leading ...

SUSE CVE-2017-8309

Memory leak in the audio/audio.c in QEMU aka Quick Emulator allows remote attackers to cause a denial of service memory consumption by repeatedly starting and stopping audio capture...