4 papers
LoRango: It Takes Two LoRAs to Unlock Hidden Behaviors in Diffusion Models
Jin Wei, Rundong Li, Ruihao Yang +10
Users commonly combine multiple Low-Rank Adaptation (LoRA) adapters to personalize images with different subjects, styles, and visual attributes. Yet inspecting adapters individual…
IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications
Yuewantong Song, Guanhang Shi, Yin Cai +5
Insecure Direct Object Reference (IDOR), often modeled as Broken Object-Level Authorization (BOLA), remains prevalent in Java database applications because identity and authorizati…
HuntFUZZ: Enhancing Error Handling Testing through Clustering Based Fuzzing
Jin Wei, Ping Chen, Jun Dai +4
Testing a program's capability to effectively handling errors is a significant challenge, given that program errors are relatively uncommon. To solve this, Software Fault Injection…
SQLaser: Detecting DBMS Logic Bugs with Clause-Guided Fuzzing
Jin Wei, Ping Chen, Kangjie Lu +2
Database Management Systems (DBMSs) are vital components in modern data-driven systems. Their complexity often leads to logic bugs, which are implementation errors within the DBMSs…