1729 matches found
reconpal
ReconPal: NLPを活用した情報セキュリティ...
reconpal
ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might ...
Astra Linux – Vulnerability in Thunderbird
The parent process does not properly check whether the Speech Synthesis feature is enabled when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...
CVE-2026-90535
Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chatId without ownership verification. Attackers can terminate active chatflow predictions for any user by submitting...
EUVD-2026-76853
Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chatId without ownership verification. Attackers can terminate active chatflow predictions for any user by submitting...
CVE-2026-90535
Flowise versions before 3.1.4 are affected by an unauthenticated denial-of-service vulnerability in the /api/v1/text-to-speech/abort endpoint. The root cause is that the endpoint accepts user-supplied chatflowId and chatId values without ownership verification, allowing an attacker to terminate a...
CVE-2026-90535 Flowise before 3.1.4 Denial of Service via text-to-speech/abort
Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chatId without ownership verification. Attackers can terminate active chatflow predictions for any user by submitting...
PT-2026-90640
🚨 CVE-2026-90535 Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chatId without ownership verification. Attackers can terminate active chatflow predictions for any user ...
CVE-2026-69531
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
CVE-2026-69456
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-69444
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-69456
CVE-2026-69456 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privileged local access with no user int...
EUVD-2026-73511
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-69444
CVE-2026-69444 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, and high impact across conf...
EUVD-2026-73506
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-69531
CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...
EUVD-2026-72995
Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...
Microsoft Windows Speech Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...