[SECURITY] Fedora 39 Update: espeak-ng-1.51.1-6.fc39

The eSpeak NG Next Generation Text-to-Speech program is an open source spee ch synthesizer that supports over 70 languages. It is based on the eSpeak engine created by Jonathan Duddington. It uses spectral formant synthesis by default which sounds robotic, but can be configured to use Klatt forma...

TTS API OS Command Injection Vulnerability

The TTS API is a text-to-speech REST API for multiple TTS engines from the individual developer Pedro Trujillo. An operating system command injection vulnerability exists in TTS API version 2.1.4 and earlier, which stems from the onSpeechDone function of a file that can lead to operating system...

SUSE: Security Advisory (SUSE-SU-2023:4559-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Generation of Error Message Containing Sensitive Information in Readtomyshoe_Project Readtomyshoe

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What i...

SUSE CVE-2014-1724

Use-after-free vulnerability in Freebsoft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service application hang or possibly have unspecified other impact via a text-to-speech request...

CVE-2023-0070

The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

Cross site scripting

The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

CVE-2023-0070

The CVE-2023-0070 entry concerns the ResponsiveVoice Text To Speech WordPress plugin (pre-1.7.7). Affected component: shortcode attribute handling; root cause: lack of validation/escaping of certain shortcode attributes before output. Impact: stored XSS possibility for users with the Contributor ...

WordPress Plugin ResponsiveVoice Text To Speech 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Exploit for CVE-2019-16253

K0mraid3s-System-Shell Way back in 2019, a vulnerability that...

Security Bulletin: Speech to Text, Text to Speech ICP, WebSphere Application Server Liberty Fix

Summary WebSphere Application Server Liberty vulnerability to Cross-site Scripting fixed in Liberty 20.0.0.5. Fix included in ICP WatsonTexttoSpeech and Speech to Text v1.1.2 GA: 6/19/20. Vulnerability Details CVEID:CVE-2020-4303 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3...

Security Bulletin: ICP Speech to Text, Text to Speech Oracle Java Vulnerability Fix

Summary An Oracle Java vulnerability has been fixed by a Redhat patch https://access.redhat.com/errata/RHSA-2020:0202, included in ICP Watson Text to Speech, Speech to Text v1.1.2 6/19/20. Vulnerability Details CVEID:CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to th...

Security Bulletin: Speech to Text, Text to Speech ICP WebSphere Application Server Liberty Fix

Summary Fix for Websphere Application Server Liberty vulnerability to Identity Spoofing CVE-2020-4421 in ICP WatsonTexttoSpeech and Watson Speech to Text v1.1.2 Vulnerability Details CVEID:CVE-2020-4421 DESCRIPTION: IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an...

Security Bulletin: WAS Liberty vunerabilities affect IBM Watson Text to Speech and Speech to Text (IBM Watson™ Speech Services 1.1)

Summary A cookie created without a secure flag can cause a vulnerability in WAS Liberty affecting IBM Watson Text to Speech and Speech to Text . Vulnerability Details CVEID:CVE-2019-4305 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive...

Security Bulletin: Speech to Text, Text to Speech ICP, WebSphere Application Server Liberty Fix

Summary A vulnerability in Apache CXF affecting WebSphere Liberty JAX-WS has been fixed in Liberty: 20.0.0.5. This fix is included in ICP Watson Text to Speech, Speech to Text v1.1.2 GA: 6/19/20. Vulnerability Details CVEID:CVE-2019-17573 DESCRIPTION: Apache CXF is vulnerable to cross-site...

Security Bulletin: Vulnerability in Apache Log4j may affect IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-4104)

Summary A vulnerability in Apache Log4j CVE-2021-4104 has been identified that may affect IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data. Several components of IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data use Log4j to log diagnostic data unrelated to customer...

Security Bulletin: Speech to Text, Text to Speech ICP, WebSphere Application Server Liberty Fix

Summary A WebSphere liberty vulnerability to a DOS has been fixed in Liberty 20.0.0.5. This fix is included in ICP WatsonTexttoSpeech, Speech to Text v1.1.2 6/19/20. Vulnerability Details CVEID:CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a...

Security Bulletin: Information disclosure vulnerability in WebSphere Application Server affects IBM Watson Text to Speech and Speech to Text (IBM Watson™ Speech Services 1.1)

Summary There is a potential information disclosure vulnerability, where a Stack is displayed in IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain...

WordPress ResponsiveVoice Text To Speech Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Software ResponsiveVoice Text To Speech Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0070 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 8f6ea421a44b Credits...

ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. responsivevoicebutton voice='"; alert1; "'...