Eric-d

NombreEric-d
Inscribirse2026-03-28
Puntos De La Comunidad420
Commits0
Envía30
Publicaciones0
Voto A Favor0
RangoExperimentado
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (8x)
📤 Submitter (4x)

Envía (30)

Cronología (30)

IDTítuloSumisiónModeraciónArtículoPEstado
852884Sipeed PicoClaw Unreleased main branch after launcher introduction commit `e55b3b7a8d0b1ea1522da08fd46155ee4f58b794` and before a fix is merged Improper Access Control (CWE-284)2026-06-092026-07-0937725920Aceptado
852880Sipeed PicoClaw <= 0.2.9 Information Disclosure (CWE-200)2026-06-092026-07-093663740Duplicado
852879Sipeed PicoClaw <= 0.2.9 Incorrect Authorization (CWE-863)2026-06-092026-07-0937725820Aceptado
852877Sipeed PicoClaw <= 0.2.9 Server-Side Request Forgery (CWE-918)2026-06-092026-07-0937725720Aceptado
852865AstrBotDevs AstrBot <= 4.25.5 Improper Link Resolution Before File Access (CWE-59)2026-06-092026-07-1737979220Aceptado
852864AstrBotDevs AstrBot <= 4.25.5 Authentication Bypass by Spoofing (CWE-290)2026-06-092026-07-1737979120Aceptado
852863AstrBotDevs AstrBot <= 4.25.5 Authorization Bypass Through User-Controlled Key (CWE-639)2026-06-092026-07-1737979020Aceptado
852843NousResearch hermes-agent 2026.5.29.2 Cross-site Scripting (CWE-79)2026-06-092026-07-0937724720Aceptado
852842AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)2026-06-092026-07-1737978920Aceptado
852825AstrBotDevs AstrBot 4.25.2 Cross-site Scripting (CWE-79)2026-06-092026-07-1737978820Aceptado
811402vercel ai @ai-sdk/amazon-bedrock@3.0.97 OS Command Injection (CWE-78)2026-04-232026-05-1736439220Aceptado
811401Kilo-Org kilocode 7.0.47 Path Traversal (CWE-22)2026-04-232026-05-1736439020Aceptado
811400Kilo-Org kilocode 7.0.47 Arbitrary File Read (CWE-200)2026-04-232026-05-1736439120Aceptado
811399Xxxxx Xxxxxxxx Xx.xx.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)2026-04-232026-05-10
 
0Rechazado
811398Xxxxx Xxxxxxxx Xx.xx.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)2026-04-232026-05-10
 
0Rechazado
811314inkeep agents 0.58.14 Authentication Bypass (CWE-288)2026-04-232026-05-1136260820Aceptado
811313Xxxxxxxxxxxx Xxxxxxxx Xx.x.x Xxxxxxxx Xxxxx Xxxxxxxxxx (xxx-xx)2026-04-232026-05-10
 
0Rechazado
811309Xxxxxxxxxxxx Xxxxxxxx Xx.x.x Xxxxx-xxxx Xxxxxxxxx (xxx-xx)2026-04-232026-05-10
 
0Rechazado
811308Xxxxxxx-xxxxxx Xxxxx X.x.x Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx (xxx-xxx)2026-04-232026-05-10
 
0Rechazado
811291litellm <= 1.82.2 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)2026-04-232026-06-2037256120Aceptado
791920Langflow <= 1.8.3 Information Disclosure2026-03-282026-04-1935823220Aceptado
791919Langflow <= 1.1.0 Unrestricted Upload of File with Dangerous Type2026-03-282026-04-1935823120Aceptado
791917Xxxxxxxxxxxxxx <= Xxxxxxxx Xxx-xxx / Xxxxxxx Xxxxxxxxxxxxx2026-03-282026-04-05
 
0Rechazado
791916Xxxxxxxxxxxxxx <= Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx2026-03-282026-04-05
 
0Rechazado
791915Xxxxxxxxxxxxxx < Xxxxxxxx Xxxxxx Xxxxx-xxxx Xxxxxxxxx2026-03-282026-04-05
 
0Rechazado
791762FoundationAgents MetaGPT 0.8.1 Server-Side Request Forgery (CWE-918)2026-03-282026-04-1135697120Aceptado
791761FoundationAgents MetaGPT 0.8.1 Code Injection (CWE-94)2026-03-282026-04-1135697020Aceptado
791759FoundationAgents MetaGPT 0.8.1 Cross Site Request Forgery (CWE-352)2026-03-282026-04-1135696920Aceptado
791758FoundationAgents MetaGPT 0.8.1 OS Command Injection (CWE-78)2026-03-282026-04-0935652820Aceptado
791755FoundationAgents MetaGPT 0.8.1 OS Command Injection (CWE-78)2026-03-282026-04-0935652720Aceptado

Interested in the pricing of exploits?

See the underground prices here!