CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via Malicious Model Overview CVE-2024-3660 is an arbitrary code execution vulnerability in TensorFlow's Keras framework affecting versions \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

In0ri

In0ri is an automated, AI-powered website defacement detection system. Introduction In0ri acts as an intelligent watchdog for your web applications. Instead of relying on traditional source code monitoring, it simulates real-user behavior by periodically taking screenshots of your target websites...

deep-pwning

Deep-pwning es un framework ligero para experimentar con modelos de aprendizaje automático con el objetivo de evaluar su robustez frente a un adversario motivado. Tenga en cuenta que deep-pwning en su estado actual está lejos de madurez o completitud. Está pensado para que experimentes con él, lo...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

Ruse

Ruse Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setu...

frigate

Frigate NVR™ - Detección de objetos en tiempo real para cámaras IP English | 简体中文 Un NVR completo y local diseñado para Home Assistant con detección de objetos mediante IA. Utiliza OpenCV y Tensorflow para realizar la detección de objetos en tiempo real localmente para cámaras IP. Se recomienda...

alibi-detect

Alibi Detect es una biblioteca de Python de código disponible centrada en la detección de outliers , adversarial y deriva. El paquete tiene como objetivo cubrir detectores tanto en línea como fuera de línea para datos tabulares, texto, imágenes y series temporales. Tanto los backends de TensorFlo...

cleverhans

CleverHans última versión: v4.0.0 Este repositorio contiene el código fuente de CleverHans, una biblioteca de Python para evaluar la vulnerabilidad de los sistemas de aprendizaje automático a los ejemplos adversariales. Puedes aprender más sobre estas vulnerabilidades en el blog adjunto. La...

eyeballer

Eyeballer Give those screenshots of yours a quick eyeballing. Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal EyeWitness or GoWitness and th...

AI_HACKING

AIHACKING Colección de CVEtrabajo sobre explotación binaria de tenserflow PARA CVE202223591QUE SIGUE EN DESARROLLO NECESITO AVERIGUAR CÓMO CONVERTIR JSON DE VUELTA A PROTOBUF Y LUEGO HACER with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa"...

DeepPass

DeepPass Aplicación dockerizada que analiza documentos en busca de candidatos a contraseñas. La publicación del blog "DeepPass — Finding Passwords With Deep Learning" ofrece más detalles sobre el enfoque y el desarrollo del modelo. Para ejecutarlo: docker-compose up Esto expondrá...

CVE-2026-86818 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

GHSA-JVVF-X445-J334 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

AZL-105918 CVE-2026-19553 affecting package tensorflow 2.16.1-11

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

AZL-105912 CVE-2026-12345 affecting package tensorflow 2.16.1-11

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CLEANSTART-2026-SI19530 Security fix for CVE-2026-44899 applied in: tensorflow-gpu-jupyter 2.21.0-r5

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DO33300 Security fix for CVE-2026-44897 applied in: tensorflow-gpu-jupyter 2.21.0-r5

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PO47077 Security fix for CVE-2026-44898 applied in: tensorflow-gpu-jupyter 2.21.0-r5

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CB04703 Security fix for CVE-2026-42557 applied in: tensorflow-gpu-jupyter 2.21.0-r5

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...