secretflow

简体中文｜English SecretFlow是一个统一的框架，用于保护隐私的数据智能和机器学习。为了实现这个目标，它提供了以下内容： 抽象设备层，包括明文设备和封装了各种密态协议的密态设备。 设备流层，将高阶算法转为设备对象流和DAG。 算法层，使用水平或垂直分区的数据进行数据分析和机器学习。 工作流层，无缝集成数据处理、模型训练和超参调整。 文档 SecretFlow 快速开始 用户指南 API文档 教程 相关项目 Kuscia: 一款基于 K3s 的轻量级隐私计算任务编排框架。 SCQL: 允许多个不信任方在不泄露其私人数据的情况下进行联合分析的系统。 SPU:...

secretflow

简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...

Dark-Moon

DarkMoon La plataforma de pentesting con IA de código abierto que ejecuta un pentest completo por sí sola y nunca filtra tus datos Apunta DarkMoon a un objetivo autorizado. 50 agentes de IA especializados razonan, encadenan exploits reales a través de web, nube, Active Directory y Kubernetes, y...

Mandating-Honeypots-Project

Mandating-Honeypots-Project A medida que leyes como la Parents Decide Act H.R.8250 y la Digital Age Assurance Act de California Assembly Bill 1043 avanzan por los órganos legislativos, la privacidad, el anonimato y la seguridad de los datos se cargan de amenazas sistémicas y de una nueva...

Watermark_Spoofing

EL IMPACTO DEL MARCADO DE AGUA DE AUDIO EN LAS CONTRAMEDIDAS ANTI-SPOOFING DE AUDIO Este repositorio proporciona la implementación oficial de nuestro artículo: EL IMPACTO DEL MARCADO DE AGUA DE AUDIO EN LAS CONTRAMEDIDAS ANTI-SPOOFING DE AUDIO . Explora la demo interactiva y las visualizaciones...

Linux Distros Unpatched Vulnerability : CVE-2026-50003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both...

CVE-2026-50003

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

CVE-2026-50003

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

UBUNTU-CVE-2026-50003

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

CVE-2026-50003 OFFIS DCMTK Toolkit Path Traversal

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative ../ paths and absolute paths...

CVE-2026-50003

The CVE-2026-50003 issue affects the DCMTK toolkit. A malicious or compromised server can exploit the bit-preserving C-GET storage mode in the DCMTK client to write files outside the designated output directory, using both relative (../) paths and absolute paths. Multiple sources (RH CVE entry, E...

PT-2026-53992

Name of the Vulnerable Software and Affected Versions DCMTK affected versions not specified Description A compromised or malicious server can force a client to write files outside the designated output directory. This occurs when the client uses the bit-preserving C-GET storage mode, allowing the...

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors. In this work, we first show that, despite claims, existing problem-space attacks remain largely impractical. Most techniques leverage software transplantation to inject entire beni...

Oracle Linux 7 : openssh (ELSA-2026-22468)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22468 advisory. 7.4p1-23.0.5 - Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35385Orabug: 39480251 Tenable has extracted the...

CVE-2026-54533

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to...

CVE-2024-27928

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, if an attacker hacks into a vantage6 user's email account, they can 1 reset the password via email and then 2 reset the 2FA token via email. This way they reduce 2FA to 1FA email access. Note that...

CVE-2026-54533

vantage6 node (open-source infrastructure for privacy-preserving analysis) contains an Improper Access Control vulnerability prior to version 5.0.0 that could allow malicious algorithms to access other algorithms’ input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and ...

EUVD-2024-55640

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, users can reset their MFA token via API routes that send them an email. Currently the number of emails that is sent is not limited. This gives attackers the option to flood someones mailbox with a l...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

EUVD-2026-35865

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...