707 matches found
CVE-2026-112283
A flaw was found in libbluray. By supplying a specially crafted Clip Information .clpi file with an excessively large point value, an attacker can trigger uncontrolled memory and processor consumption during parsing. This issue can lead to system or application resource exhaustion, resulting in a...
attack-attention
Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks Official PyTorch implementation of the paper "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" , accepted in the Adversarial Machine Learning on Computer Vision: Foundation Models + X ADV...
Agentic-CLIP-Benchmark
Agentic-CLIP-Benchmark: Zero-Shot Evaluation on CIFAR-10 -green.svg This project implements a robust, automated pipeline for evaluating OpenAI's CLIP ViT-B/32 model on the full CIFAR-10 test set 10,000 images. Developed using an AI Native workflow Trae IDE , it achieves a high-precision zero-shot...
DeeCLIP
DeeCLIP: A Robust and Generalizable Transformer-Based Framework for Detecting AI-Generated Images ☀️ If you find this work useful for your research, please kindly star our repo and cite our paper! ☀️ TODO We are working hard on the following items: Release ArXiv paper Release training scripts...
PT-2026-99319
Name of the Vulnerable Software and Affected Versions vllm versions prior to 0.29.0 Description The software fails to enforce the VLLM MAX AUDIO CLIP FILESIZE MB limit during multimodal chat audio decoding. This allows unauthenticated clients to bypass file size restrictions by submitting oversiz...
Region-Level Black-Box Defense against Stealthy Embedding-Space Backdoors in CLIP
Contrastive Language--Image Pretraining CLIP has emerged as a dominant vision backbone due to its strong transferability and zero-shot capabilities. However, recent studies reveal a critical vulnerability: embedding-space backdoor attacks. By poisoning only a tiny fraction of image--text pairs,...
Robot Visions: Breaking ReCAPTCHA at Zero Cost and Zero Shot
Google reCAPTCHA is the most widely deployed visual CAPTCHA service, protecting hundreds of thousands of websites from automated bots. It serves as a critical line of defense against automated attacks, including credential stuffing, bulk account creation, and automated form abuse. It has proven...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fixed an infinite recursive call of clippush. syzbot reported the issue below. 0 This occurs when we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push; the second call copie...
khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)
transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...
pytorch-clip-interrogator (>=2023.2.19.0, <=2023.2.19.1), stochasticx (>=0.0.14, <=0.0.19) +2 more potentially affected by CVE-2026-69112 via accelerate (0.14.0)
accelerate PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - pytorch-clip-interrogator =2023.2.19.0, =0.0.14, =0.1.0, =0.0.7, =0.0.9 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...
pytorch-clip-interrogator (>=2023.2.19.0, <=2023.2.19.1), stochasticx (>=0.0.14, <=0.0.19) +2 more potentially affected by CVE-2026-69112 via accelerate (0.14.0)
accelerate PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - pytorch-clip-interrogator =2023.2.19.0, =0.0.14, =0.1.0, =0.0.7, =0.0.9 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M7...
khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)
transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...
fashion-clip (>=0.1.1, <=0.1.2), parallel-corpus-mnbvc (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-66007 via datasets (2.10.0)
datasets PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - fashion-clip =0.1.1, =1.0.0, =1.0.8 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...
fashion-clip (>=0.1.1, <=0.1.2), parallel-corpus-mnbvc (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-66007 via datasets (2.10.0)
datasets PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - fashion-clip =0.1.1, =1.0.0, =1.0.8 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...
Windows Clip Service Privilege Escalation
The vulnerability of the Windows Clip Service on Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2026-43841
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clip Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50384
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clip Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50384
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clip Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50384
CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...
