450 matches found
interrogation-game
Interrogation A voice-based detective interrogation game. You're a detective. Mistral is a suspect who's lying. Your job is to catch the lie through questioning alone. Every case is procedurally generated — a unique white-collar crime, suspect, cover story, and one hidden lie. The suspect is play...
CVE-2023-27587-PoC
CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...
EUVD-2026-109577
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096
A heap out-of-bounds write vulnerability exists in the Pocket-TTS component of ggml-org llama.cpp . The flaw is located in the list_pockettts_state_slots function within the file tools/mtmd/models/pockettts-gen.cpp, caused by the manipulation of the mmproj argument. This issue requires local acce...
CVE-2026-116096 ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
CVE-2026-116096 ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...
K0mraid3s-System-Shell-PREBUILT
K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...
alphafold3-pytorch-lightning-hydra (>=0.2.126, <=0.4.28), cosyvoice-package (0.0.2) +7 more potentially affected by CVE-2026-106440 via hydra-optuna-sweeper (1.2.0)
hydra-optuna-sweeper PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-optuna-sweeper and may be impacted: - alphafold3-pytorch-lightning-hydra =0.2.126, =0.0.1, =0.0.1.dev4, =0.4.0, =2.2.0, =2.9.0 - reverse-distillation 0.1.0...
alphafold3-pytorch-lightning-hydra (>=0.2.126, <=0.4.28), cosyvoice-package (0.0.2) +7 more potentially affected by CVE-2026-106440 via hydra-optuna-sweeper (1.2.0)
hydra-optuna-sweeper PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-optuna-sweeper and may be impacted: - alphafold3-pytorch-lightning-hydra =0.2.126, =0.0.1, =0.0.1.dev4, =0.4.0, =2.2.0, =2.9.0 - reverse-distillation 0.1.0...
alphafold3-pytorch-lightning-hydra (>=0.2.126, <=0.4.28), cosyvoice-package (0.0.2) +7 more potentially affected by CVE-2026-106440 via hydra-optuna-sweeper (1.2.0)
hydra-optuna-sweeper PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hydra-optuna-sweeper and may be impacted: - alphafold3-pytorch-lightning-hydra =0.2.126, =0.0.1, =0.0.1.dev4, =0.4.0, =2.2.0, =2.9.0 - reverse-distillation 0.1.0...
Malicious Package
Overview voxel-tts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in voxel-tts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bcd85c4464339b45ec445d1c402ecbc97ab4b50b71738d1fc3873c88f9cff5 The package advertises text-to-speech inference but contains no model, audio, or inference code. Importing voxeltts loads voxeltts/harness.py, which...
MAL-2026-17461 Malicious code in voxel-tts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bcd85c4464339b45ec445d1c402ecbc97ab4b50b71738d1fc3873c88f9cff5 The package advertises text-to-speech inference but contains no model, audio, or inference code. Importing voxeltts loads voxeltts/harness.py, which...
CVE-2026-96578
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
WordPress GSpeech TTS – WordPress Text To Speech Plugin plugin <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin GSpeech TTS versions = 3.22.0...
EUVD-2026-91238
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-96578
The GSpeech TTS – WordPress Text To Speech Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.22.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. Specifically, an mXSS-sty...
CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...