SAPAG: A Self-Adaptive Privacy Attack From Gradients