Project-Onyx

프로젝트 오닉스 AI 텔레메트리 스푸핑 및 WASM 샌드박싱을 통한 고급 EDR 우회. 프로젝트 오닉스는 최신 EDR 시스템에 대한 고급 우회 기술을 시연하기 위해 설계된 PoC 레드 팀 파이프라인입니다. 전통적인 시그니처 기반 난독화에서 벗어나 행동적 위장behavioral camouflage과 엄격한 환경 키잉environmental keying을 지향합니다. 이 프로젝트는 비전통적인 다중 계층 실행 파이프라인을 연구하는 개념 증명 레드 팀 연구입니다. 아키텍처는 다섯 가지 뚜렷한 기술을 연결합니다: AI 텔레메트리 위장,...

PROMPTPurify

promptpurify LLM 채팅 앱용 초소형 프롬프트 인젝션 방화벽. 약 14MB. CPU 전용. 사용자 입력과 LLM 사이에 끼워 넣는 드롭인 가드 — 동일한 머신에서 실행되며, GPU도, API도, 추가 서비스도 필요 없습니다. SecureLayer7 레드팀이 만들었습니다. 대부분의 OSS 가드레일은 수백 MB에 달하고 GPU를 요구하면서도, 실제 프로덕션에서 우리가 목격하는 공격들을 여전히 놓칩니다. 우리는 그런 것 없이 자체 AI 제품과 고객 앱에 탑재할 수 있는 무언가가 필요했습니다. 왜 이런 것이 필요한가 |...

Cawdog

CAWODOG – Python 기반 산업용 AI를 위한 IP 보호 PoC CAWODOGCat World Dominance Group는 오프라인 산업용 기계에 배포된 Python 기반 AI 모델 을 보호하기 위한 장난스럽지만 현실적인 개념 증명입니다. 핵심 아이디어: 개CAWODOG의 '적'를 감지하는 작은 이미지 분류기를 가져와 간단한 앱에 담은 다음, 점진적으로 강화 하여 IP 도용에 대비하는 것입니다. 이 PoC는 다음 주제에 대한 내부 백서의 동반 자료로 설계되었습니다: 오프라인 산업용 AI 배포를 위한 Python IP...

CVE-2026-55832

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

EUVD-2026-77721

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832

Tract (tract-onnx crate, a Rust inference toolkit for TensorFlow/ONNX) is vulnerable to arbitrary local file read when loading an untrusted ONNX model. The external_data location field is joined to the model directory via Path::join without rejecting absolute paths or .. components, so the defaul...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832 Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

CVE-2026-55832: Improper Limitation of a Pathname to a Restricted Directory

Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled externaldata location from an ONNX model through onnx/src/tensor.rs getexternalresources and joins the value to the model...

ONNX: TOCTOU arbitrary file read/write in save_external_dat

SummaryThe saveexternaldata method seems to include multiple issues introducing a local TOCTOU vulnerability, an arbitrary file read/write on any system. It potentially includes a path validation bypass on Windows systems.Regarding the TOCTOU, an attacker seems to be able to overwrite victim's...

PYSEC-2026-3876 ONNX: TOCTOU arbitrary file read/write in save_external_dat

Summary The saveexternaldata method seems to include multiple issues introducing a local TOCTOU vulnerability, an arbitrary file read/write on any system. It potentially includes a path validation bypass on Windows systems. Regarding the TOCTOU, an attacker seems to be able to overwrite victim's...

Cache Poisoning

Spring AI is vulnerable to cache poisoning. The vulnerability is due to insecure handling of the deterministic cache path, where an attacker can pre‑create the cache directory and plant a malicious ONNX model file and achieve execution when the model is loaded...

CVE-2026-49114

A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...

CVE-2026-63632

A flaw was found in Open Neural Network Exchange ONNX. An out-of-bounds read can occur in the onnx.versionconverter.convertversion function when processing Gemm nodes with input tensors having fewer than two dimensions. This vulnerability, caused by a lack of rank checking, could allow an attacke...

EUVD-2026-66822

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852: Insecure Temporary File

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852 Predictable cache directory location allows local ONNX model substitution in Spring AI

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...