Yu_Bao

الأسمYu_Bao
تسجيل22/08/2025
نقاط المجتمع561
يلتزم0
يقدم44
المنشورات0
تصويت بدعم0
الرتبةخبير
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (11x)
👋 Regular Visitor
📤 Submitter (5x)

يقدم (44)

التسلسل الزمني (44)

معرفعنوانارسالالاعتدالإدخالاالحالة
806833ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policy17/04/202601/05/202636075520تمت الموافقة
804227Xxxxxxxxx Xxxxxx X.xx.x Xxxxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx14/04/202629/04/2026
 
0مرفوض
803270NousResearch hermes-agent 0.8.0 Path Write Protection Bypass13/04/202629/04/202636012120تمت الموافقة
803269NousResearch hermes-agent 0.8.0 Arbitrary File Read13/04/202629/04/202636012020تمت الموافقة
802847Xxxxxx Xxxxxxx Xxxxxx X.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx11/04/202625/04/2026
 
0مرفوض
798583666ghj MiroFish 0.1.2 Missing Authentication for Critical Functions07/04/202625/04/202635962120تمت الموافقة
798526666ghj MiroFish 0.1.2 Remote Code Execution07/04/202625/04/202635962019تمت الموافقة
797099go-kratos kratos 2.9.2 Unintended Route Exposure via DefaultServeMux Fallback04/04/202624/04/202635954520تمت الموافقة
796164AstrBotDevs AstrBot 4.22.1 Server-Side Template Injection03/04/202624/04/202635952720تمت الموافقة
795355chatboxai chatbox 1.20.0 Arbitrary Command Execution02/04/202612/04/202635699320تمت الموافقة
795345Xxx-xxxxxxx Xxx X.x.xx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx02/04/202609/04/2026
 
0مرفوض
795212ericc-ch copilot-api 0.7.0 DNS Rebinding Attack02/04/202622/04/202635903920تمت الموافقة
794601ericc-ch copilot-api 0.7.0 Cross-Origin Token Theft via Wildcard CORS & Open Token Endpoint01/04/202620/04/202635830020تمت الموافقة
793558zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read31/03/202609/04/202635655220تمت الموافقة
793554zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access31/03/202611/04/202635699019تمت الموافقة
792661AstrBotDevs AstrBot 4.22.1 Server-Side Request Forgery (SSRF)30/03/202611/04/202635697920تمت الموافقة
792655AstrBotDevs AstrBot 4.22.1 Arbitrary Command Execution30/03/202611/04/202635697820تمت الموافقة
792653AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload30/03/202611/04/202635697720تمت الموافقة
785834Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx23/03/202605/04/2026
 
0مرفوض
785833Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx23/03/202605/04/2026
 
0مرفوض
785832assafelovic gpt-researcher 3.4.3 Reflected Cross-Site Scripting (XSS)23/03/202605/04/202635541520تمت الموافقة
781657Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx17/03/202622/03/2026
 
0مرفوض
781587Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx17/03/202622/03/2026
 
0مرفوض
780729vanna-ai vanna 2.0.2 CORS Origin Reflection with Credentials16/03/202601/04/202635465320تمت الموافقة
780727vanna-ai vanna 2.0.2 Missing Authentication on All API Endpoints16/03/202601/04/202635465220تمت الموافقة
780685Xxxxxxx Xxxxxxx X.x.x Xxxxxxxxxxxx Xxxx Xxxxxx16/03/202622/03/2026
 
0مرفوض
780666Sanster IOPaint 1.5.3 Path Traversal - Arbitrary File Read16/03/202631/03/202635444820تمت الموافقة
779148PromtEngineer localGPT Latest (commit: 4d41c7d) Arbitrary File Read13/03/202627/03/202635389020تمت الموافقة
779122PromtEngineer localGPT Latest (commit 4d41c7d) LLM Prompt Injection via Unsanitized User Input13/03/202627/03/202635388920تمت الموافقة
778316PromtEngineer localGPT Latest (commit 4d41c7d) Unrestricted File Upload12/03/202627/03/202635388817تمت الموافقة
778315PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization12/03/202627/03/202635388720تمت الموافقة
746912Xxx-xx Xxx Xx.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx)26/01/202601/02/2026
 
0مرفوض
686263Xxxxxx Xxxx.xx Xx.x.x Xxxx Xxxxxxxx31/10/202531/10/2025
 
0مرفوض
648387SeriaWei ZKEACMS v4.3 Non-blind SSRF05/09/202515/09/202532389017تمت الموافقة
647629SeriaWei ZKEACMS v4.3 SSRF04/09/202520/09/202532511916تمت الموافقة
646871Harness harness v3.3.0 Login Endpoint Brute-Force03/09/202520/09/202532511617تمت الموافقة
646676Xxxxxxxxxx Xxx Xx.x.x Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx03/09/202509/09/2025
 
0مرفوض
646674MariaDB mcp V0.1.0 Unauthorized access vulnerability03/09/202513/09/20253235070مكرر
646673Xxxxx Xxx-xxxxx Xx.x.x Xxxxxxxxxxxx Xxxxxx03/09/202509/09/2025
 
0مرفوض
646662litmusautomation litmus-mcp-server v0.0.1 Unauthorized access03/09/202513/09/20253235080مكرر
639779yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF22/08/202510/09/202532348420تمت الموافقة
639778yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE22/08/202510/09/20253178570مكرر
639777yanyutao0402 ChanCMS V3.3.0 Unauthorized SQL injection22/08/202510/09/202532348316تمت الموافقة
639748Tenda AC9 V15.03.05.19 Hard-coded Credentials22/08/202530/08/202532202220تمت الموافقة

التالي ▸نظرة عامة◂ السابق

Want to know what is going to be exploited?

We predict KEV entries!