Eric-b

NombreEric-b
Inscribirse2026-03-11
Puntos De La Comunidad620
Commits0
Envía40
Publicaciones0
Voto A Favor0
RangoExperto
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Envía (40)

Cronología (40)

IDTítuloSumisiónModeraciónArtículoPEstado
855807nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-863)2026-06-112026-07-133781270Duplicado
855806nextlevelbuilder GoClaw 3.13.2 Command Execution Policy Bypass (CWE-184)2026-06-112026-07-133781270Duplicado
855805nextlevelbuilder GoClaw 3.13.3-beta.3 Path Traversal / Sandbox Escape (CWE-22)2026-06-112026-07-1337812820Aceptado
855804nextlevelbuilder GoClaw 3.11.3 Command Execution Policy Bypass (CWE-184)2026-06-112026-07-1337812720Aceptado
855798nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918)2026-06-112026-07-1337812620Aceptado
855797Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)2026-06-112026-07-1337812520Aceptado
855796mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59)2026-06-112026-07-1337812420Aceptado
855795mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)2026-06-112026-07-1337812320Aceptado
855793mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)2026-06-112026-07-1337812220Aceptado
855792mosaxiv clawlet 0.2.10 Protection Mechanism Failure (CWE-693)2026-06-112026-07-1337812120Aceptado
829407nextlevelbuilder GoClaw <= 3.11.3 Server-Side Request Forgery (SSRF) (CWE-918)2026-05-142026-06-0136771020Aceptado
829403HKUDS nanobot <= 0.1.5.post3 Missing Origin Validation in WebSockets (CWE-1385)2026-05-142026-06-143576500Duplicado
829402NousResearch hermes-agent <= v0.12.0 Authorization Bypass Through User-Controlled Key (CWE-639)2026-05-142026-06-0736908120Aceptado
829401Xxxxxxxxxxxx Xxxxxx-xxxxx <= Xxxxx.x.xx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxx (x2026-05-142026-06-01
 
0Rechazado
821939nextlevelbuilder goclaw <= v3.11.3 OS Command Injection (CWE-78)2026-05-072026-05-3136749820Aceptado
821938nextlevelbuilder goclaw <= v3.11.3 Improper Authorization (CWE-285)2026-05-072026-05-3136749720Aceptado
821937nextlevelbuilder goclaw <= 3.11.3 Improper Privilege Management (CWE-269)2026-05-072026-05-3136749620Aceptado
821936unitedbyai droidclaw <= v0.5.3 Improper Restriction of Excessive Authentication Attempts (CWE-307)2026-05-072026-05-3136749520Aceptado
811276adenhq hive latest Path Traversal (CWE-22)2026-04-232026-05-1636438420Aceptado
811275Xxxxx-xx Xxxxx <= X.x.xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)2026-04-232026-05-10
 
0Rechazado
811274aiwaves-cn agents latest Uncontrolled Resource Consumption (CWE-400)2026-04-232026-05-1136260620Aceptado
811273VectifyAI PageIndex latest Infinite Loop (CWE-835)2026-04-232026-05-1136260520Aceptado
811175fishaudio Bert-VITS2 <= 406b79a Path Traversal (CWE-22)2026-04-232026-05-1636438320Aceptado
811173fishaudio Bert-VITS2 latest (commit 724d0b2) Path Traversal (CWE-22)2026-04-232026-05-1636438220Aceptado
797646nextchat <= 2.16.1 Server-Side Request Forgery (CWE-918) / Path Traversal (CWE-22)2026-04-062026-04-2735978020Aceptado
797645nextchat <= 2.16.1 Server-Side Request Forgery / SSRF (CWE-918)2026-04-062026-04-2735977920Aceptado
797644coze-dev coze-studio <= 0.5.1 SQL Injection (CWE-89) / Improper Input Validation (CWE-20)2026-04-062026-04-2535960220Aceptado
797643smythos sre <= 0.0.15 Improper Authentication / Authorization Bypass (CWE-287 / CWE-632026-04-062026-04-2535960120Aceptado
797642smythos sdk <= 0.0.15 Credential Exposure / Information Disclosure (CWE-200)2026-04-062026-04-2535960020Aceptado
797641pyspur-dev pyspur <= 0.1.18 Server-Side Template Injection (SSTI) (CWE-1336)2026-04-062026-04-253136380Duplicado
778273Xxxxxxx Xxxxx <= Xxxxxx Xxxxx-xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0Rechazado
778272Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0Rechazado
778271Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0Rechazado
778270Sinaptik AI PandasAI >= 3.0.0 Code Injection (CWE-94)2026-03-122026-03-2735388520Aceptado
778269Sinaptik AI PandasAI <= 3.0.0 Path Traversal (CWE-22)2026-03-122026-03-2735388420Aceptado
778268Sinaptik AI PandasAI <= 0.1.4 SQL Injection (CWE-89)2026-03-122026-03-2735388320Aceptado
778267Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)2026-03-122026-03-2735388220Aceptado
778266Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Generation of Error Message Containing Sensitive Information (CWE-209)2026-03-122026-03-2735388120Aceptado
778265Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Use of Hard-coded Credentials (CWE-798)2026-03-122026-03-2735388020Aceptado
778264Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)2026-03-122026-03-2735387920Aceptado

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!