Lucene search
+L

7823 matches found

CNVD
CNVD
added 2025/07/21 12:0 a.m.22 views

GPT-SoVITS-WebUI Code Issue Vulnerability

GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI that stems from unsafe deserialization handling of the AudioPreDeEcho class when receiving serialized data submitted by the user, which can be exploited by an attacker to execute arbitrary commands on...

9.8CVSS7.8AI score0.00661EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:0 a.m.9 views

GPT-SoVITS-WebUI open_asr function command injection vulnerability

GPT-SoVITS-WebUI is a TTS training model. A command injection vulnerability exists in the GPT-SoVITS-WebUI openasr function. An attacker can exploit this vulnerability to execute arbitrary commands on the system...

9.8CVSS8.2AI score0.03377EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:0 a.m.8 views

GPT-SoVITS-WebUI change_label function command injection vulnerability

GPT-SoVITS-WebUI is a TTS training model. A command injection vulnerability exists in the GPT-SoVITS-WebUI changelabel function that can be exploited by an attacker to execute arbitrary commands on the system...

9.8CVSS8.2AI score0.033EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/17 9:1 p.m.19 views

CVE-2025-49835

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py openasr function. asrinpdir and a number of other variables takes user input, which is passed to the openasr function, which concatenates the...

9.8CVSS7.9AI score0.03377EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/17 9:1 p.m.10 views

CVE-2025-49836

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py changelabel function. pathlist takes user input, which is passed to the changelabel function, which concatenates the user input into a command...

9.8CVSS7.9AI score0.033EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/17 9:1 p.m.23 views

CVE-2025-49833

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in the webui.py openslice function. sliceoptroot and slice-inp-path takes user input, which is passed to the openslice function, which concatenates the use...

9.8CVSS7.9AI score0.03372EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/07/17 12:0 a.m.28 views

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

0.05177EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/07/16 11:21 p.m.6 views

SUSE CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.4AI score0.00242EPSS
SaveExploits1References14
NVD
NVD
added 2025/07/16 1:15 p.m.10 views

CVE-2025-34300

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

10CVSS0.5108EPSS
SaveExploits4References3
Vulnrichment
Vulnrichment
added 2025/07/16 12:57 p.m.4 views

CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

10CVSS7.2AI score0.5108EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2025/07/16 12:57 p.m.19 views

CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

10CVSS0.5108EPSS
SaveExploits4References3
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.9 views

LILIN Digital Video Recorder 安全漏洞

LILIN Digital Video Recorder is a video recorder from LILIN Taiwan, China. A security vulnerability exists in LILIN Digital Video Recorder versions prior to 2.0b6020200207, which originates from a command injection and may result in the execution of arbitrary commands...

8.7CVSS7.5AI score0.01077EPSS
SaveExploits0References3
NVD
NVD
added 2025/07/15 9:15 p.m.11 views

CVE-2025-49836

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py changelabel function. pathlist takes user input, which is passed to the changelabel function, which concatenates the user input into a command...

9.8CVSS0.033EPSS
SaveExploits1References5
NVD
NVD
added 2025/07/15 9:15 p.m.19 views

CVE-2025-49833

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in the webui.py openslice function. sliceoptroot and slice-inp-path takes user input, which is passed to the openslice function, which concatenates the use...

9.8CVSS0.03372EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/07/15 8:31 p.m.8 views

CVE-2025-49836 GHSL-2025-048: GPT-SoVITS Command Injection vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py changelabel function. pathlist takes user input, which is passed to the changelabel function, which concatenates the user input into a command...

9.3CVSS7.2AI score0.033EPSS
SaveExploits1References5
CVE
CVE
added 2025/07/15 8:31 p.m.27 views

CVE-2025-49836

GPT-SoVITS-WebUI is vulnerable to a command injection in the change_label function of webui.py. In versions up to 20250228v3, the path_list input is concatenated into a command and executed on the server, enabling arbitrary command execution. Documents consistently identify the affected component...

9.8CVSS7.2AI score0.033EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/07/15 8:31 p.m.16 views

CVE-2025-49836 GHSL-2025-048: GPT-SoVITS Command Injection vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py changelabel function. pathlist takes user input, which is passed to the changelabel function, which concatenates the user input into a command...

9.3CVSS0.033EPSS
SaveExploits1References5
CVE
CVE
added 2025/07/15 8:29 p.m.32 views

CVE-2025-49835

GPT-SoVITS-WebUI contains a command-injection vulnerability in the open_asr (webui.py) function. In versions 20250228v3 and prior, user-controlled input is incorporated into a shell command, which is then executed on the server, enabling arbitrary command execution. Multiple connected sources cor...

9.8CVSS7.2AI score0.03377EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/15 8:25 p.m.4 views

CVE-2025-49834 GHSL-2025-046: GPT-SoVITS Command Injection vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py opendenoise function. denoiseinpdir and denoiseoptdir take user input, which is passed to the opendenoise function, which concatenates the user...

9.3CVSS7.2AI score0.033EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/07/15 8:25 p.m.15 views

CVE-2025-49834 GHSL-2025-046: GPT-SoVITS Command Injection vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py opendenoise function. denoiseinpdir and denoiseoptdir take user input, which is passed to the opendenoise function, which concatenates the user...

9.3CVSS0.033EPSS
SaveExploits1References5
Rows per page
Query Builder