ultralytics

中文 | 한국어 | 日本語 | Русский | Deutsch | Français | Español | Português | Türkçe | Tiếng Việt | العربية Ultralytics creates cutting-edge, state-of-the-art SOTA YOLO models built on years of foundational research in computer vision and AI. Constan...

StegoScan

StegoScan 概要 StegoScan.pyは、Webサイト、Webサーバ、ローカルディレクトリにおけるステガノグラフィ検出を自動化する、次世代の強力なツールです。AIによる物体・テキスト認識と深いファイル分析を統合しています。限られたファイルタイプに焦点を当てたり手動処理を必要とする従来のステガノグラフィ検出ツールとは異なり、StegoScan.pyは包括的で自動化されたスキャンを実現します。Webサイトをスクレイピングし、埋め込まれたファイルを解析し、PNG、JPG、BIN、PDF、DOCX、WAV、MP3など幅広いフォーマットにわたって隠されたメッセージを検出します。...

yolo-cage

yolo-cage: 害を及ぼさない自律コーディングエージェント あなたは責任あるエンジニアです。最も機密性の高いシステムやコードベースをAIに好き勝手にさせたりはしません。 だからこそ、Claude Codeのようなツールの安全機構を決して 無効にしたりしません。危険な操作ごとに許可を求めてくるので安全です！ そこで待ち、応答します。やがて判断疲れが訪れます。そしてそれが起こるのです。 許可プロンプトはスレッドモデルの最も弱い部分、つまり疲れたユーザーを見落としています。エージェントに力を与えつつ爆発半径を制限し、判断をPRレビューまで先送りできたらどうでしょう？...

ultralytics v8.4.142

中文 | 한국어 | 日本語 | Русский | Deutsch | Français | Español | Português | Türkçe | Tiếng Việt | العربية Ultralytics creates cutting-edge, state-of-the-art SOTA YOLO models built on years of foundational research in computer vision and AI. Constan...

PYSEC-2026-1506 Label Studio has a Path Traversal Vulnerability via image Field

Description A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio...

airflow-provider-skypilot (0.1.3), autodistill-efficient-yolo-world (>=0.1.0, <=0.1.1) +30 more potentially affected by CVE-2026-13482 via skypilot (>=0.2.2, <=0.13.0)

skypilot PYPI version =0.2.2, =0.1.0, =0.1.2.dev0, =0.1.4, =0.12.0, =0.1.4, =0.1.1, =0.9.9, =0.9.9rc23, =0.9.9rc23, =0.9.9, =0.9.9, =1.0.2, =0.1.0, =0.12.1 and more Source cves: CVE-2026-13482 Source advisory: SNYK:PYTHON-SKYPILOT-17675441...

Command Injection

Overview @google/gemini-cli is a Gemini CLI Affected versions of this package are vulnerable to Command Injection via the processing of untrusted workspace folders in headless mode and the handling of tool allowlisting under --yolo mode. An attacker can execute arbitrary code by submitting...

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

GHSA-WPQR-6V78-JR5G Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

Malicious Package

Overview node-red-contrib-yolo-object-detection is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious code in node-red-contrib-yolo-object-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37c68b0e146f969ed875753302026894ce41d379d736a1856b9e12a8c1a4479 The package node-red-contrib-yolo-object-detection was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2845 Malicious code in node-red-contrib-yolo-object-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37c68b0e146f969ed875753302026894ce41d379d736a1856b9e12a8c1a4479 The package node-red-contrib-yolo-object-detection was found to contain malicious code. Source: ghsa-malware...

EUVD-2021-18566

Malware in sbrugna...

EUVD-2021-18567

Malware in sbrugna...

Microsoft GitHub Copilot Remote Code Execution Vulnerability

GitHub Copilot is an AI-driven code assistant developed by Microsoft, widely used in Visual Studio Code, Visual Studio and other development environments, providing intelligent code completion and generation services for millions of developers worldwide. Microsoft GitHub Copilot remote code...

Microsoft GitHub Copilot and Visual Studio 命令注入漏洞

GitHub Copilot is an AI-driven code assistant developed by Microsoft, widely used in Visual Studio Code, Visual Studio and other development environments, providing intelligent code completion and generation services for millions of developers worldwide. Microsoft GitHub Copilot remote code...

ShrinkBox: Backdoor Attack on Object Detection to Disrupt Collision Avoidance in Machine Learning-Based Advanced Driver Assistance Systems

Advanced Driver Assistance Systems ADAS significantly enhance road safety by detecting potential collisions and alerting drivers. However, their reliance on expensive sensor technologies such as LiDAR and radar limits accessibility, particularly in low- and middle-income countries. Machine...

CVE-2021-31681

Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...

CVE-2021-31680

Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...

yolo-blog.com Cross Site Scripting vulnerability OBB-4041680

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...