mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

Look at The XNU Through A Tube CVE-2018-4242 Write-up Zhuo Liang of Qihoo 360 Nirvan Team Contents 1 Introduction 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 The XNU Kernel 2 2.1 System Call . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...

MIG-COW: Transferable Adversarial Attacks on Deepfake Detectors Via Gradient Decomposition

Despite recent advances, deepfake detectors remain vulnerable to adversarial examples, particularly in diverse, real-world settings. We propose MIG-COW, a novel adversarial attack framework that generates highly generalizable and visually imperceptible adversarial examples. By combining...

CVE-2026-111865

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865

A security flaw exists in the THU-MIG yoloe project (up to commit 40cd606cabdbe2b566d6f14a6b162c89206e9a1b) within the AutoBackend Model Loading component. The vulnerability affects the eval function in the file ultralytics/nn/autobackend.py . By manipulating the imgsz/names/kpt_shape arguments, ...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

EUVD-2026-103375

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

PT-2026-116504

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt shape results in improper...

CVE-2026-111865: Improper Neutralization of Directives in Dynamically Evaluated Code

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

THU-MIG Yoloe code injection vulnerability

THU-MIG Yoloe has a code injection vulnerability. This vulnerability stems from improper handling of parameters in the eval function of the ultralytics/nn/autobackend.py file within the AutoBackend Model Loading component. This improper handling leads to the of instructions in the dynamically...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-86049 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

PT-2026-90210

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description In the ocfs2 module, a node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. Specifically, the num locks and...

SUSE CVE-2026-64474

In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...

UBUNTU-CVE-2026-64474

In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...

CVE-2026-64474

In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-5422 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2026-44727 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...