2417 matches found
CVE-2025-40985 SQL Injection in SCATI Vision Web
SQL injection vulnerability in SCATI Vision Web of SCATI Labs from version 4.8 to 7.2. This vulnerability allows an attacker to exfiltrate some data from the database via the ‘login’ parameter in the endpoint ‘/scatevisionweb/index.php/loginForm’...
PT-2025-29714 · Scati · Scati Vision Web
Name of the Vulnerable Software and Affected Versions: SCATI Vision Web versions 4.8 through 7.2 Description: A SQL injection issue exists in SCATI Vision Web. This vulnerability allows an attacker to exfiltrate data from the database via the login parameter in the /scatevision...
SCATI Vision Web SQL注入漏洞
SCATI Vision Web is a browser component from SCATI Spain. A SQL injection vulnerability exists in SCATI Vision Web versions 4.8 through 7.2, which originates from a SQL injection and could lead to the disclosure of database information...
CVE-2025-40985: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SCATI Vision Web of SCATI Labs from version 4.8 to 7.2. This vulnerability allows an attacker to exfiltrate some data from the database via the ‘login’ parameter in the endpoint ‘/scatevisionweb/index.php/loginForm’...
Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts across Modalities
Whitepaper called Bridging The Gap In Vision Language Models In Identifying Unsafe Concepts Across Modalities...
CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption while processing packet data with exceedingly large packet...
CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption while processing packet data with exceedingly large packet...
BackFed: an Efficient and Standardized Benchmark Suite for Backdoor Attacks in Federated Learning
Federated Learning FL systems are vulnerable to backdoor attacks, where adversaries train their local models on poisoned data and submit poisoned model updates to compromise the global model. Despite numerous proposed attacks and defenses, divergent experimental settings, implementation errors, a...
UniAud: a Unified Auditing Framework for High Auditing Power and Utility with One Training Run
Differentially private DP optimization has been widely adopted as a standard approach to provide rigorous privacy guarantees for training datasets. DP auditing verifies whether a model trained with DP optimization satisfies its claimed privacy level by estimating empirical privacy lower bounds...
The Age of Sensorial Zero Trust: Why We Can No Longer Trust Our Senses
In a world where deepfakes and cloned voices are emerging as sophisticated attack vectors, organizations require a new security mindset: Sensorial Zero Trust. This article presents a scientific analysis of the need to systematically doubt information perceived through the senses, establishing...
Boosting Generative Adversarial Transferability with Self-Supervised Vision Transformer Features
The ability of deep neural networks DNNs come from extracting and interpreting features from the data provided. By exploiting intermediate features in DNNs instead of relying on hard labels, we craft adversarial perturbation that generalize more effectively, boosting black-box transferability...
On the Feasibility of Poisoning Text-To-Image AI Models Via Adversarial Mislabeling
Today's text-to-image generative models are trained on millions of images sourced from the Internet, each paired with a detailed caption produced by Vision-Language Models VLMs. This part of the training pipeline is critical for supplying the models with large volumes of high-quality image-captio...
E-FreeM2: Efficient Training-Free Multi-Scale and Cross-Modal News Verification Via MLLMs
The rapid spread of misinformation in mobile and wireless networks presents critical security challenges. This study introduces a training-free, retrieval-based multimodal fact verification system that leverages pretrained vision-language models and large language models for credibility assessmen...
CVAT.ai CVAT 安全漏洞
CVAT.ai CVAT is an open source data processing tool from CVAT.ai. A security vulnerability exists in CVAT.ai CVAT versions 2.2.0 through 2.39.0, which stems from a lack of validation during the import process and could lead to a data leak...
CVE-2023-50450
An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges...
CVE-2023-50450
An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges...
Deep CNN Face Matchers Inherently Support Revocable Biometric Templates
One common critique of biometric authentication is that if an individual's biometric is compromised, then the individual has no recourse. The concept of revocable biometrics was developed to address this concern. A biometric scheme is revocable if an individual can have their current enrollment i...
SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-2025-17836)
Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2023-50450
Sensopart VISOR Vision Sensors versions prior to 2.10.0.2 are vulnerable to an improper privilege management issue (CWE-269). This flaw allows local users to perform unspecified actions with elevated privileges . To remediate this vulnerability, users should update to version 2.10.0.2 or later. S...