392 matches found
CVE-2025-11262-Lab
CVE-2025-11262 - Link Whisper Free Unauthenticated Stored Blind XSS Executive Summary This repository contains a local Docker lab for reproducing CVE-2025-11262 , an unauthenticated stored cross-site scripting issue affecting the WordPress plugin Link Whisper Free. The lab compares two plugin...
Whisper_Bully
Whisper Bully Strumento di ricerca per Estrazione BDADDR Bluetooth, Denial-of-Service e Hijack © 2026 @Ymsniper — Solo per ricerca di sicurezza autorizzata. Panoramica Whisper Bully è uno strumento di ricerca sulla sicurezza Bluetooth in tre fasi che prende di mira i dispositivi che pubblicizzano...
whisper-pair
फास्ट पेयर भेद्यता स्कैनर WhisperPair हमलों के प्रति संवेदनशील ब्लूटूथ एक्सेसरीज़ का पता लगाने के लिए सुरक्षा अनुसंधान उपकरण 🌐 WhisperPair अनुसंधान • 📦 स्थापना • 🚀 उपयोग • 🔬 तकनीकी विवरण ⚠️ अस्वीकरण यह उपकरण केवल अधिकृत सुरक्षा परीक्षण और अनुसंधान के लिए है। स्पष्ट प्राधिकरण के बिना उपकरणों का...
CVE-2025-36911-Wisper_Pair_Target_Finder
Questo non è un exploit per CVE-2025-36911!!! Questo è un rilevatore per trovare dispositivi potenzialmente vulnerabili! Usalo solo sui tuoi dispositivi! Non sono responsabile per eventuali danni! Testato solo su distribuzioni basate su Debian usando python3 Uso: root@kitploit: sudo apt update &&...
CVE-2026-14601
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
EUVD-2026-63816
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601 Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601
The Link Whisper Free WordPress plugin before 0.9.7 contains a SQL injection vulnerability caused by improper sanitization and escaping of the domain parameter before it is used in a SQL query. Authenticated users with the Editor role or above can exploit this to execute arbitrary SQL commands, r...
CVE-2026-48762
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using fetch without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitra...
CVE-2026-48762
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using fetch without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitra...
PT-2026-70915
Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0 Description The OpenAI Create Transcription action handler uses the fetch function to retrieve a user-supplied audio URL without implementing existing Server-Side Request Forgery SSRF protections. SSRF is a fla...
Linux Distros Unpatched Vulnerability : CVE-2026-17513
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the...
Linux Distros Unpatched Vulnerability : CVE-2026-17512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads...
CVE-2026-17513
A flaw was found in whisper.cpp, a library for machine learning. A local attacker can exploit a vulnerability in the ggmlftypetoggmltype function by manipulating the ftype argument. This manipulation leads to a reachable assertion, which can cause the application to terminate, resulting in a Deni...
CVE-2026-17512
A flaw was found in whisper.cpp. A local attacker can exploit an out-of-bounds read vulnerability in the logmelspectrogram function. This flaw could lead to the disclosure of sensitive information...
DEBIAN-CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...
UBUNTU-CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...
DEBIAN-CVE-2026-17512
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance...
UBUNTU-CVE-2026-17512
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance...
EUVD-2026-49313
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...