Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/12 9:17 p.m.•16 views

CVE-2025-71429

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.8CVSS0.02873EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/12 8:55 p.m.•44 views

CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.8CVSS0.02873EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/12 8:55 p.m.•12 views

CVE-2025-71429

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.8CVSS6.3AI score0.02873EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/12 8:55 p.m.•30 views

CVE-2025-71429 GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.3CVSS6.4AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/12 8:55 p.m.•19 views

EUVD-2025-211070

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.8CVSS6.3AI score0.02873EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•13 views

CVE-2025-71429: Improper Neutralization of Special Elements used in an OS Command

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $... in the UVR5 WebUI output folder textboxes with mp3 or m4a export...

9.8CVSS6.3AI score0.02873EPSS
SaveExploits0References2
Rows per page
Query Builder