ybdesire

Nombreybdesire
Inscribirse2025-03-25
Puntos De La Comunidad669
Commits17
Envía42
Publicaciones0
Voto A Favor0
RangoExperto
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

Envía (42)

Cronología (42)

IDTítuloSumisiónModeraciónArtículoPEstado
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity2026-05-122026-05-3136758420Aceptado
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication2026-05-112026-05-3136757420Aceptado
824924lharries whatsapp-mcp v0.0.1 Path Traversal2026-05-102026-05-3136754420Aceptado
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist2026-04-292026-05-2636562720Aceptado
813768FoundDream miniclawd 0 Command Injection2026-04-272026-05-2436543420Aceptado
813767FoundDream miniclawd 0 OS Command Injection2026-04-272026-05-2436543320Aceptado
8090018421bit MiniClaw 0 OS Command Injection2026-04-212026-05-0936245520Aceptado
8081678421bit MiniClaw 0 Path Traversal2026-04-202026-05-0736190120Aceptado
8081668421bit MiniClaw 0 OS Command Injection2026-04-202026-05-0736190020Aceptado
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity2026-03-282026-04-0935654020Aceptado
774685pygments <=2.19.2 Denial of Service2026-03-072026-03-2135232720Aceptado
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx2026-03-062026-03-07
 
0Rechazado
601029coldfunction qCUDA 0.0 Integer Overflow2025-06-202025-06-2531382018Aceptado
597382HobbesOSR kitten 0.0 Resource Consumption2025-06-162025-06-1931335820Aceptado
590528letta-ai letta >=v0.4.1 Code Injection2025-06-052025-06-1531257020Aceptado
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow2025-05-312025-06-1531256220Aceptado
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx2025-05-262025-05-27
 
0Rechazado
578126HumanSignal label-studio-ml-backend 0.0 Deserialization2025-05-152025-05-2531026120Aceptado
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection2025-05-102025-05-2431023920Aceptado
573800FunAudioLLM InspireMusic 0.0 Deserialization2025-05-082025-05-2431023620Aceptado
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection2025-05-052025-05-1530906820Aceptado
570923XU-YIJIE grpo-flat 0.0 Deserialization2025-05-042025-05-1530904220Aceptado
567796VITA-MLLM Freeze-Omni 0.0 Deserialization2025-04-302025-05-1530899920Aceptado
562942GAIR-NLP factool 0.0 Code Injection2025-04-212025-05-0430736520Aceptado
562617handrew browserpilot 0.0 Code Injection2025-04-202025-05-033071950Duplicado
562383handrew browserpilot 0.0 Code Injection2025-04-192025-05-0230719520Aceptado
559222inclusionAI AWorld 0.0 Command Injection2025-04-162025-04-2830639520Aceptado
558415web-arena-x webarena <=0.2.0 Code Injection2025-04-152025-04-2730637620Aceptado
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx2025-04-102025-04-21
 
0Rechazado
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx2025-04-102025-04-21
 
0Rechazado
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0Rechazado
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0Rechazado
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0Rechazado
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E2025-04-102025-04-2130576920Aceptado
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E2025-04-092025-04-1830565920Aceptado
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E2025-04-092025-04-1830565820Aceptado
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization2025-04-072025-04-1630496620Aceptado
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization2025-04-062025-04-1530467920Aceptado
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx2025-04-062025-04-07
 
0Rechazado
542529thu-pacman chitu <0.1.0 Deserialization2025-03-252025-04-0330311120Aceptado
542527InternLM lmdeploy <=0.7.1 Code Injection2025-03-252025-04-0330310917Aceptado
542520InternLM lmdeploy <=0.7.1 Deserialization2025-03-252025-04-0330310817Aceptado

Commits (17)

Cronología (17)

IDArtículoCVEActualizadoModeraciónCP
20686235HumanSignal label-studio-ml-backend PT neural_nets.py load escalada de privilegiosCVE-2025-51732025-05-272025-05-2711
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely escalada de privilegiosCVE-2025-51512025-05-272025-05-2711
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict escalada de privilegiosCVE-2025-51482025-05-272025-05-2711
20686218defog-ai introspect Test integration_routes.py test_custom_tool escalada de privilegiosCVE-2025-47672025-05-272025-05-2711
20686217XU-YIJIE grpo-flat grpo_vanilla.py main escalada de privilegiosCVE-2025-47422025-05-272025-05-2711
20686216VITA-MLLM Freeze-Omni utils.py torch.load escalada de privilegiosCVE-2025-47012025-05-272025-05-2711
20413547GAIR-NLP factool tool.py run_single escalada de privilegiosCVE-2025-42612025-05-052025-05-0511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator escalada de privilegiosCVE-2025-40222025-04-302025-04-3011
20348680inclusionAI AWorld shell_tool.py subprocess.Popen escalada de privilegiosCVE-2025-40322025-04-302025-04-3011
20297878wix-incubator jam Jinja2 Template jam.pyCVE-2025-38412025-04-242025-04-2411
20267006sarrionandia tournatrack Jinja2 Template check_id.py escalada de privilegiosCVE-2025-38052025-04-212025-04-2111
20267005thautwarm vscode-diana Jinja2 Template Gen.py escalada de privilegiosCVE-2025-38042025-04-212025-04-2111
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem escalada de privilegiosCVE-2025-36772025-04-212025-04-2111
20267003Xorbits Inference model.py load escalada de privilegiosCVE-2025-36222025-04-212025-04-2111
20267002thu-pacman chitu backend.py torch.load escalada de privilegiosCVE-2025-31652025-04-212025-04-2111
20267001InternLM LMDeploy conf.py open escalada de privilegiosCVE-2025-31632025-04-212025-04-2111
20267000InternLM LMDeploy PT utils.py load_weight_ckpt escalada de privilegiosCVE-2025-31622025-04-212025-04-2111

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!