398 matches found
Whisper_Bully
Whisper Bully Инструмент исследования Bluetooth: извлечение BDADDR, отказ в обслуживании и перехват © 2026 @Ymsniper — Только для авторизованных исследований безопасности. Обзор Whisper Bully — это трёхэтапный инструмент для исследования безопасности Bluetooth, нацеленный на устройства,...
CVE-2025-11262-Lab
CVE-2025-11262 - Link Whisper Free 無認証の保存型ブラインドXSS 概要 このリポジトリには、WordPressプラグイン Link Whisper Free に影響を及ぼす無認証の保存型クロスサイトスクリプティング問題である CVE-2025-11262 を再現するためのローカルDockerラボが含まれています。 このラボでは、2つのプラグインバージョンを比較します：...
CVE-2025-36911-Wisper_Pair_Target_Finder
Это не эксплойт для CVE-2025-36911!!! Это детектор для поиска потенциально уязвимых устройств! Используйте только на своих устройствах! Я не несу ответственности за ущерб! Протестировано только на дистрибутивах на основе Debian с использованием python3 Использование: root@kitploit: sudo apt updat...
whisper-pair
Сканер уязвимости Fast Pair Инструмент для исследования безопасности, предназначенный для обнаружения Bluetooth-аксессуаров, уязвимых к атакам WhisperPair 🌐 Исследование WhisperPair • 📦 Установка • 🚀 Использование • 🔬 Технические детали ⚠️ Отказ от ответственности Этот инструмент предназначен...
CVE-2026-14601
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
EUVD-2026-63816
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601
The Link Whisper Free WordPress plugin before 0.9.7 contains a SQL injection vulnerability caused by improper sanitization and escaping of the domain parameter before it is used in a SQL query. Authenticated users with the Editor role or above can exploit this to execute arbitrary SQL commands, r...
CVE-2026-14601 Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-48762
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using fetch without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitra...
CVE-2026-48762
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using fetch without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitra...
PT-2026-70915
Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0 Description The OpenAI Create Transcription action handler uses the fetch function to retrieve a user-supplied audio URL without implementing existing Server-Side Request Forgery SSRF protections. SSRF is a fla...
Linux Distros Unpatched Vulnerability : CVE-2026-17513
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the...
Linux Distros Unpatched Vulnerability : CVE-2026-17512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads...
CVE-2026-17513
A flaw was found in whisper.cpp, a library for machine learning. A local attacker can exploit a vulnerability in the ggmlftypetoggmltype function by manipulating the ftype argument. This manipulation leads to a reachable assertion, which can cause the application to terminate, resulting in a Deni...
CVE-2026-17512
A flaw was found in whisper.cpp. A local attacker can exploit an out-of-bounds read vulnerability in the logmelspectrogram function. This flaw could lead to the disclosure of sensitive information...
DEBIAN-CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...
UBUNTU-CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...
DEBIAN-CVE-2026-17512
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance...
UBUNTU-CVE-2026-17512
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function logmelspectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance...
EUVD-2026-49313
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...