18 matches found
CVE-2026-115800
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...
CVE-2026-115800
A path traversal vulnerability exists in UbiquitousLearning mllm versions up to 2.0.2 . The flaw is located in the load_model function within the pymllm/mobile/convertor/__init__.py file of the Convertor component. By manipulating the shard_file argument, a local attacker can perform path travers...
EUVD-2026-109158
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...
CVE-2026-115800 UbiquitousLearning mllm Convertor __init__.py load_model path traversal
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...
CVE-2026-115800 UbiquitousLearning mllm Convertor __init__.py load_model path traversal
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...
CVE-2026-115800 UbiquitousLearning mllm Convertor __init__.py load_model path traversal
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function loadmodel of the file pymllm/mobile/convertor/init.py of the component Convertor. The manipulation of the argument shardfile leads to path traversal. The attack needs to be performed locall...
PT-2026-122223
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load model of the file pymllm/mobile/convertor/ init .py of the component Convertor. The manipulation of the argument shard file leads to path traversal. The attack needs to be performed...
From GAN-Based Models to GPT-5: A Taxonomy-Guided Study of Human Performance in Detecting Deepfake Face Images
Generative models for deepfakes have rapidly evolved from GAN-based architectures to diffusion models and multimodal large language models MLLMs. However, empirical research on human performance in detecting deepfake face images has not kept pace. It remains unclear if and how detection performan...
MobileInject: Evaluating Reasoning-To-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection
Multimodal large language model MLLM-based mobile agents are rapidly evolving from conversational assistants into autonomous systems that perceive, reason over, and act on smartphone environments. This capability also exposes a new security risk: adversaries can embed malicious objectives in...
From Sharp Eyes to Expert Mind: Internalizing Expert Knowledge in MLLMs for Tampered Text Detection
Tampered Text Detection TTD is essential for safeguarding document authenticity in security-critical workflows. Existing expert models are effective at capturing subtle manipulation traces but often generalize poorly across diverse document domains, while Multimodal Large Language Models MLLMs...
MMJailBench: A Factorized Benchmark for Disentangling Multimodal Jailbreak Vulnerabilities
Multimodal Large Language Models MLLMs are increasingly deployed in real-world applications, yet how different factors shape their jailbreak vulnerabilities remains poorly understood. Existing benchmarks often couple harmful intent, prompt framing, visual semantics, and instruction carrier within...
EUVD-2025-15166
Malicious code in bioql PyPI...
CVE-2025-4701
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local ho...
CVE-2025-4701
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local ho...
CVE-2025-4701 VITA-MLLM Freeze-Omni utils.py torch.load deserialization
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local ho...
CVE-2025-4701 VITA-MLLM Freeze-Omni utils.py torch.load deserialization
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local ho...
CVE-2025-4701
The CVE-2025-4701 issue affects VITA-MLLM Freeze-Omni (up to 20250421), specifically the torch.load usage in models/utils.py where improper handling of the path argument enables deserialization and a potential local-host exploit. Root cause: manipulation of the path parameter in torch.load leads ...
CVE-2025-4701: Deserialization of Untrusted Data
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local ho...