voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-62663 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-62663 Source advisory: MEND:CVE-2026-62663...

Malicious Package

Overview xerohub-discord-voice-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview xerohub-discord-voice-v3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-11155 Malicious code in xerohub-discord-voice-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2e867e455a79a59e233b1536348eca9ba4b72c217997c4ceea032e7a5ad2fe XerohubVoice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the package author. startVoiceJoiner...

Malicious code in xerohub-discord-voice-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2e867e455a79a59e233b1536348eca9ba4b72c217997c4ceea032e7a5ad2fe XerohubVoice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the package author. startVoiceJoiner...

MAL-2026-11154 Malicious code in xerohub-discord-voice-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066cb7d27a71055b89630648ee5ae6eed64d6db93e883de66a5db678cfa7663c xerohub-discord-voice-v2 advertises itself as a Discord voice-channel joiner but its exported startVoiceJoiner flow covertly forwards the caller's...

Malicious Package

Overview twilio-voice-js-reference-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-50645 DESCRIPTION: There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead ...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-55404...

CVE-2026-65701: Improper Limitation of a Pathname to a Restricted Directory

SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrate arbitrary files by supplying attacker-controlled filesystem paths through the audiopath field o...

columba v2.0.9

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

Discord-voice-exploit-

Di...

Details of Alan Turing’s Voice Encryption System

Really interesting piece of cryptographic history: In November 2023, a large cache of his wartime papers--nicknamed the "Bayley papers"--was auctioned in London for almost half a million U.S. dollars. The previously unknown cache contains many sheets in Turing's own handwriting, telling of his...

CVE-2026-12753: Improper Neutralization of Special Elements used in an SQL Command

The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

As identity attacks grow more sophisticated in the AI era, organizations need stronger authentication methods that protect users from phishing, credential theft, and social engineering. To address these evolving threats, Microsoft Entra ID is updating its authentication experience by making...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-50023...

iluvatar (0.0.1), open-autotools (0.0.1) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.8.6)

yt-dlp PYPI version 2024.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - iluvatar 0.0.1 - open-autotools 0.0.1 - philbot-voice 2.16.0 - playlist2podcast =1.1.0, =2024.9.6.post3, =2024.9.30 Source cves: CVE-2026-50574...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-44209 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-44209 Source advisory: OSV:PYSEC-2026-2390...

Evaluating AI Models' Capability to Automate Voice Phishing Attacks

Voice phishing vishing attacks have traditionally been limited by the need for human operators. The rapid emergence of high-quality AI voice synthesis and large language models LLMs reduces this bottleneck and enables scalable, automated scams. In this paper, we conduct a large-scale survey...

chatterbot-voice (>=0.1.3, <=0.1.5), shynabot (0.0.1) +1 more potentially affected by CVE-2026-58198 via chatterbot (>=0.6.3, <=1.0.4)

chatterbot PYPI version =0.6.3, =0.1.3, =0.1.5 - shynabot 0.0.1 - shynataskmanager 0.0.1 Source cves: CVE-2026-58198 Source advisory: MEND:CVE-2026-58198...