gvision

GVision est une application de recherche d'image inversée qui utilise l'API Google Cloud Vision pour détecter des points de repère et des entités web à partir d'images, vous aidant à recueillir rapidement et facilement des informations précieuses...

skyvern

🐉 Automatiser les workflows basés sur le navigateur en utilisant les LLM et la vision par ordinateur 🐉...

attack-attention

Attaquer l'attention des modèles de fondation perturbe efficacement les tâches en aval Implémentation officielle en PyTorch de l'article "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" , accepté à l'atelier Adversarial Machine Learning on Computer Vision: Foundati...

LMDeploy - Server-Side Request Forgery

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery SSRF vulnerability in the vision-language module. The loadimage function in lmdeploy/vl/utils.py fetches arbitrary URLs without validating internal or...

CVE-2026-33626-Lab

CVE-2026-33626 — Laboratoire SSRF vision-langage LMDeploy Aperçu Ce dépôt reproduit CVE-2026-33626 , une vulnérabilité de type Server-Side Request Forgery SSRF dans le chemin de chargement d'images vision-langage de LMDeploy. Le comportement vulnérable se produit lorsque LMDeploy reçoit une URL...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME: Повышение привилегий через боковую загрузку DLL Серьезность: ВЫСОКИЙ CVSS 8.4 CWE: CWE-829 Включение функциональности из недоверенной сферы управления Опубликовано: 16/03/2026 CNA: Toreon Затронутые версии: Thermalright TR-VISION HOME ≤ 2.0.5 Windows...

confusable-vision

confusable-vision Évaluation empirique de la similarité des glyphes par raycasting vectoriel des contours. Rend les paires de caractères Unicode confusables dans 245 polices système, mesure la similarité structurelle directement à partir des contours sans pixellisation, et produit des artefacts...

Netryx-OpenSource-Next-Gen-Street-Level-Geolocation

NETRYX محرك تحديد المواقع الجغرافية على مستوى الشارع مفتوح المصدر ارفع أي صورة شارع. احصل على إحداثيات GPS دقيقة. دقة أقل من 50 متر. لا حاجة لمعالم. يعمل بالكامل على أجهزتك. عروض توضيحية · كيف يعمل · البدء · الاستخدام · الأسئلة الشائعة هذا الإصدار قديم، استخدم هذا بدلاً من ذلك المستودع الجديد ما ...

grubcrawler

안티-탐지, 비전 폴백, P2P 메시를 갖춘 에이전틱 웹 크롤러. 엔드포인트 · 메시 · 안티-탐지 · Ghost Protocol · 라이브 스트림 · MCP 도구 · 빠른 시작 · 벤치마크 · 아키텍처 JavaScript 렌더링, Camoufox 안티-탐지 브라우저, 요청별 프록시 라우팅, 자율 에이전트 루프를 갖춘 풀스택 웹 크롤링 엔진입니다. 네이티브 Rust 추출 엔진으로 페이지를 깔끔한 마크다운으로 변환합니다. 표준 크롤링이 Cloudflare, CAPTCHA 또는 JavaScript 벽에 막히면 Ghost...

VISION-ProcMon

À propos VISION-ProcMon est un outil dédié à l'analyse de malwares et plus précisément à l'analyse comportementale. VISION-ProcMon combine les technologies Rust et web afin de fournir une visualisation rapide et améliorée du comportement d'un malware après avoir capturé son activité avec l'outil...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool. The root cause is a failure to canonicalize symlinks before reading files, allowing an attacker to create workspace symlinks pointing to external files with image extensions. This enables arbitrary ...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

EUVD-2026-60972

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

PT-2026-77165

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.64 Description The image analyze tool fails to canonicalize symlinks before reading files, leading to a path traversal issue. This allows attackers to create workspace symlinks that point to external files with...

CVE-2026-19335

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...

CVE-2026-19335 Jane-xiaoer skill-vision-control config.ts getSkillVersionsDir path traversal

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...

CVE-2026-19335 Jane-xiaoer skill-vision-control config.ts getSkillVersionsDir path traversal

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...

CVE-2026-19335

CVE-2026-19335 concerns the Jane-xiaoer skill-vision-control project, affecting the function getSkillVersionsDir in src/svc/utils/config.ts. The vulnerability arises from how the argument skillName is handled, enabling a path traversal condition. The issue is restricted to a local attack vector a...

CVE-2026-19335

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...