MeshTNC

MeshTNC MeshTNC는 LoRa 데이터를 소비자용 라디오와 주고받기 위한 도구입니다. 코드 - github.com/datapartyjs/MeshTNC 릴리즈 - github.com/datapartyjs/MeshTNC/releases 지원 - ko-fi/dataparty 기능 펌웨어에 내장된 간단한 시리얼 CLI 시리얼 CLI를 사용하여 LoRA를 통해 원시 바이트hex 전송 LoRA 패킷 로깅을 시리얼hex로 출력 BLE 패킷 스니핑 KISS-TNC 모드 컴파일 Visual Studio Code용 PlatformIO...

MeshCore

MeshCore 소개 MeshCore는 LoRa 및 기타 패킷 무선기를 사용하는 임베디드 프로젝트를 위한 경량의 이식 가능한 C++ 라이브러리입니다. 인터넷 없이도 작동하는 탄력적이고 분산된 통신 네트워크를 만들고자 하는 개발자를 위해 설계되었습니다. 🔍 MeshCore란 무엇인가요? MeshCore는 이제 다양한 LoRa 장치를 지원하여, 수동으로 펌웨어를 컴파일할 필요 없이 쉽게 플래싱할 수 있습니다. 사용자는 Adafruit ESPTool과 같은 도구를 사용하여 사전 빌드된 바이너리를 플래싱하고, 직렬 콘솔을 통해 네트워...

DeeCLIP

DeeCLIP: AI生成画像を検出するための堅牢で汎化可能なTransformerベースのフレームワーク ☀️ 本研究がお役に立つ場合は、ぜひリポジトリにスターを付け、論文を引用してください！ ☀️ TODO 以下の項目に取り組んでいます： ArXiv論文を公開 学習スクリプトを公開 推論スクリプトを公開 チェックポイントを公開 DeeCLIP DeeCLIP は、CLIP-ViT と 融合学習 を組み合わせた、AI生成画像の検出...

Backdoor Purification for LoRA-Tuned LLMs Via Null-Space Projection

With the rapid adoption of large language models LLMs and parameter-efficient fine-tuning PEFT methods, the risk of backdoor attacks has become more severe. Existing backdoor purification methods typically rely on at least one of the strong assumptions, such as prior knowledge of triggers, access...

Backdoor Containment Via Expert Quarantine and Shutdown in LLMs

Backdoored large language models LLMs can behave normally on benign inputs while producing attacker-specified outputs under hidden triggers. Existing defenses span four stages--prior-training, in-training, post-training, and inference-time--and share one of two underlying strategies: either...

Tokenized Key-Gated Adapter Routing: A Secure Access Control Mechanism against Private Data Leakage in LLMs

Large language models LLMs are increasingly deployed in privacy-critical domains e.g., healthcare, finance, and government, but their propensity to memorize and disclose personally identifiable information PII poses serious security and compliance risks. Existing defenses typically force a...

DeepGuard

DeepGuard 📖 プロジェクト概要 DeepGuardは、多層セマンティック集約技術を用いて、大規模言語モデルの安全なコード生成能力を強化する革新的なアプローチです。この手法は、コード内のセキュリティ脆弱性を効果的に特定・緩和し、開発者により安全なコード生成ソリューションを提供します。 🔑 中核となる技術的特徴 Multi-Layer Semantic Aggregation（多層セマンティック集約） ：複数のTransformer層からの隠れ状態を集約することで、豊富なセマンティック情報を取得します Security-Aware LoRA（セキュリティ対応LoRA）...

CVE-2026-71281

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

CVE-2026-71281

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

EUVD-2026-53366

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

CVE-2026-71281

The CVE-2026-71281 details a vulnerability in Hugging Face PEFT: LoRA-GA and CorDA initialization modules call torch.load() on cache/covariance files without weights_only=True, bypassing PEFT’s safe-loading wrapper. This full pickle deserialization can lead to arbitrary code execution if a malici...

CVE-2026-71281: Deserialization of Untrusted Data

Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47620

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a race condition in the LoRA manager singleton initialization (CVE-2026-47621). The issue affects the LoRA manager component and can lead to denial of service and data tampering. The provided materials specify a CVSS 3.1 base score of 6.5 (Medium) with network att...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...