168 matches found
CVE-2026-112078
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
CVE-2026-112078
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
CVE-2026-112078
A code injection vulnerability exists in RVC-Project Retrieval-based-Voice-Conversion-WebUI versions up to 2.3.260718 . The flaw is located in the change_info_ function within the webui.py file. An attacker can achieve remote code execution by manipulating the ckpt_path argument. While the projec...
EUVD-2026-104066
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
PT-2026-117222
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change info of the file webui.py. Executing a manipulation of the argument ckpt path can lead to code injection. The attack can be executed remotely. The exploit has been publish...
CVE-2026-112078: Improper Control of Generation of Code
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...
RVC-Project Retrieval-based-Voice-Conversion-WebUI Input Validation Error Vulnerability
RVC-Project Retrieval-based-Voice-Conversion-WebUI 2.3.260718 and earlier versions have a security vulnerability. This vulnerability stems from incorrect handling of the parameter ckptpath in the changeinfo function within the webui.py file, which may lead to code injection...
"What I See Is What I Hear": Deepfake Detection across Diverse Hearing Abilities
The proliferation of audiovisual deepfakes has lowered the cost of fraud, impersonation, and misinformation, but their success ultimately depends on human perception. Detection requires integrating auditory and visual cues, yet security and privacy research has largely overlooked d/Deaf and...
CVE-2026-65701
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrate arbitrary files by supplying attacker-controlled filesystem paths through the audiopath field o...
CVE-2026-65701: Improper Limitation of a Pathname to a Restricted Directory
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrate arbitrary files by supplying attacker-controlled filesystem paths through the audiopath field o...
EUVD-2025-13502
Malicious code in bioql PyPI...
EUVD-2025-13503
Malicious code in bioql PyPI...
EUVD-2025-13504
Malicious code in bioql PyPI...
EUVD-2025-13507
Malicious code in bioql PyPI...
EUVD-2025-13509
Malicious code in bioql PyPI...