EUVD-2026-69065

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84120 Use-after-free in the Audio/Video component

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84120

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.13.1...

PT-2026-84173

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – RCE Zero-Click en iOS AudioConverterService Divulgación pública de CVE-2025-31200 – una vulnerabilidad de ejecución remota de código RCE zero-click en iOS 18.X de Apple, específicamente dentro del componente AudioConverterService. La vulnerabilidad se desencadena mediante un...

FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU

A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol RDP client can send a specially crafted Client Audio Formats Protocol Data Unit PDU to the server. This malformed PDU can cause a double-free vulnerability in the rdpsndserverrecvformats function, leading to the server reliably...

freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report CVE-2025-9196 披露 CVE-2025-9196 - Trinity Audio 中的漏洞 本仓库披露了在 Trinity Audio = 5.20.1 中发现的一个漏洞，该 WordPress 插件由 sergiotrinity 开发。 🛠 受影响版本 产品 ：Trinity Audio 版本 ：v5.20.1 URL ：https://wordpress.org/plugins/trinity-audio/ 🔒 分配的 CVE CVE ID| 类型| 组件| 影响 ---|---|---|--- CVE-2025-9196...

BLUE-SPY

BLUE-SPY - Fast Pair漏洞研究工具 安全声明与法律警告 ⚠️ 本软件仅限授权的安全研究和道德测试使用 ⚠️ 未经授权对非您拥有或未获得明确书面许可的设备使用本工具是非法的 ，可能导致： 根据《计算机欺诈和滥用法》（CFAA）及全球类似法律被提起刑事诉讼 因隐私侵犯和未经授权访问而被提起民事诉讼 窃听指控 严重的法律和经济处罚 使用本工具即表示您承认并承担全部责任。 概述 BLUE-SPY （蓝牙低功耗通用利用 - 安全渗透测试）是一款专业安全评估工具，用于分析 Google Fast Pair 协议实现中的 CVE-2025-36911 漏洞。该工具提供： 🔍...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Trinity-Audio-CVE-Report2

Trinity-Audio-CVE-Report 2 关于 CVE-2025-9886 和 CVE-2025-9952 的披露。 CVE-2025-9886 和 CVE-2025-9952 - Trinity Audio 中的漏洞 本仓库披露了在 Trinity Audio input type="h...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

CVE-2025-36911-exploit

WhisperPair Python CLI 用 Python 编写的 Fast Pair CVE-2025-36911 漏洞利用工具，用于测试我们的设备 作者： Sébastien Dudek @FlUxIuS @ Penthertz 致谢： whisperpair.eu 发现该漏洞，以及 @ZalexDev 提供的这个出色的 APK，缩短了实现时间 wpair-app ⚠️ 免责声明 仅限授权安全研究。 仅在你拥有的设备上测试。 🐛 漏洞 CVE-2025-36911 影响全球数百万蓝牙音频设备上的 Google Fast Pair 实现。 正常行为： 设备应仅在 配对模式...

RHEL 8 : freerdp (RHSA-2026:61250)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61250 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

wpair-app

WPair CVE-2025-36911（即 WhisperPair）漏洞扫描器与研究工具 功能特性 • 安装 • 使用方法 • 工作原理 • 漏洞详情 • 致谢 免责声明 本应用是由 @ZalexDev 以个人身份独立实现的。最初的鲁汶大学（KU Leuven）研究人员发现并披露了该漏洞，但未发布任何代码，且与本项目无关联。在致谢中列出他们，仅是为了认可其研究贡献。 概述 WPair 是一款防御性安全研究工具，用于演示 Google Fast Pair 协议中的 CVE-2025-36911 漏洞。该漏洞影响全球数百万蓝牙音频设备，可导致未经授权的配对以及在用户不知情的情况下访问麦克风...

steghide

此仓库为只读。 一个 GitHub 组织StegHigh 已成立，用于维护 steghide。请将所有 PR、讨论和问题提交到那里。 此外，StegHigh/steghide 正在寻找维护者。欢迎贡献！ 简介 : Steghide 是一个隐写术程序，能够将数据隐藏在各种图像和音频文件中。颜色频率或采样频率不会被改变，从而使嵌入对一阶统计测试具有抵抗力。 当前 steghide 的版本为 0.5.1 功能: 压缩嵌入数据 加密嵌入数据 嵌入校验和以验证提取数据的完整性 支持 JPEG、BMP、WAV 和 AU 文件 隐写术 :...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...