deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

In0ri

In0ri is an automated, AI-powered website defacement detection system. Introduction In0ri acts as an intelligent watchdog for your web applications. Instead of relying on traditional source code monitoring, it simulates real-user behavior by periodically taking screenshots of your target websites...

AI_HACKING

AIHACKING Collection of CVEwork on tenserflow binary pwning it FOR CVE202223591WHICH IS STILL UNDER WORK I NEED TO FIGURE OUT HOW TO TURN BACK JSON TO PROTOBUF AND THAN DO with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa" printgraphdef...

cleverhans

CleverHans latest release: v4.0.0 This repository contains the source code for CleverHans, a Python library to benchmark machine learning systems' vulnerability to adversarial examples. You can learn more about such vulnerabilities on the accompanying blog. The CleverHans library is under continu...

alibi-detect

Alibi Detect is a source-available Python library focused on outlier , adversarial and drift detection. The package aims to cover both online and offline detectors for tabular data, text, images and time series. Both TensorFlow and PyTorch backends are supported for drift detection. Documentation...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

eyeballer

Eyeballer Give those screenshots of yours a quick eyeballing. Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal EyeWitness or GoWitness and th...

CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via Malicious Model Overview CVE-2024-3660 is an arbitrary code execution vulnerability in TensorFlow's Keras framework affecting versions \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp...

Ruse

Ruse Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setu...

DeepPass

DeepPass Dockerized application that analyzes documents for password candidates. The blogpost "DeepPass — Finding Passwords With Deep Learning" gives more detail on the approach and development of the model. To run: docker-compose up This will expose http://localhost:5000 where documents can be...

frigate

Frigate NVR™ - Rilevamento oggetti in tempo reale per telecamere IP Inglese | 简体中文 Un NVR completo e locale progettato per Home Assistant con rilevamento degli oggetti tramite AI. Utilizza OpenCV e TensorFlow per eseguire il rilevamento di oggetti in tempo reale localmente per telecamere IP. L'us...

deep-pwning

Deep-pwning è un framework leggero per sperimentare con modelli di machine learning, con l'obiettivo di valutarne la robustezza contro un avversario motivato. Si noti che deep-pwning nel suo stato attuale è lontano dall'essere maturo o completo. È pensato per essere sperimentato, ampliato ed este...

AZL-107931 CVE-2026-78669 affecting package tensorflow 2.16.1-11

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107928 CVE-2026-56866 affecting package tensorflow 2.16.1-11

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-61782 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook...

GHSA-JMG2-RCXH-W8Q3 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook...

CVE-2026-103923 vulnerabilities

Vulnerabilities for packages: code-server, renovate, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, langfuse, jupyter-base-notebook, librechat, tensorflow-gpu-jupyter...

CVE-2026-93687 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, jupyter-base-notebook, tensorflow-gpu-jupyter...

GHSA-VFJ7-8CJW-P6XM vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, jupyter-base-notebook, tensorflow-gpu-jupyter...

GHSA-238P-PMPM-9MQ7 vulnerabilities

Vulnerabilities for packages: code-server, renovate, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, langfuse, jupyter-base-notebook, librechat, tensorflow-gpu-jupyter...