ybdesire

Nomybdesire
S'inscrire25/03/2025
Points Communautaires669
Commits17
Soumet42
Des Postes0
Vote Favorable0
RangExpert
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

Soumet (42)

Chronologie (42)

IDTitreSoumissionModérerEntréePStatut
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity12/05/202631/05/202636758420Accepté
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication11/05/202631/05/202636757420Accepté
824924lharries whatsapp-mcp v0.0.1 Path Traversal10/05/202631/05/202636754420Accepté
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist29/04/202626/05/202636562720Accepté
813768FoundDream miniclawd 0 Command Injection27/04/202624/05/202636543420Accepté
813767FoundDream miniclawd 0 OS Command Injection27/04/202624/05/202636543320Accepté
8090018421bit MiniClaw 0 OS Command Injection21/04/202609/05/202636245520Accepté
8081678421bit MiniClaw 0 Path Traversal20/04/202607/05/202636190120Accepté
8081668421bit MiniClaw 0 OS Command Injection20/04/202607/05/202636190020Accepté
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity28/03/202609/04/202635654020Accepté
774685pygments <=2.19.2 Denial of Service07/03/202621/03/202635232720Accepté
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx06/03/202607/03/2026
 
0Rejeté
601029coldfunction qCUDA 0.0 Integer Overflow20/06/202525/06/202531382018Accepté
597382HobbesOSR kitten 0.0 Resource Consumption16/06/202519/06/202531335820Accepté
590528letta-ai letta >=v0.4.1 Code Injection05/06/202515/06/202531257020Accepté
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow31/05/202515/06/202531256220Accepté
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx26/05/202527/05/2025
 
0Rejeté
578126HumanSignal label-studio-ml-backend 0.0 Deserialization15/05/202525/05/202531026120Accepté
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection10/05/202524/05/202531023920Accepté
573800FunAudioLLM InspireMusic 0.0 Deserialization08/05/202524/05/202531023620Accepté
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection05/05/202515/05/202530906820Accepté
570923XU-YIJIE grpo-flat 0.0 Deserialization04/05/202515/05/202530904220Accepté
567796VITA-MLLM Freeze-Omni 0.0 Deserialization30/04/202515/05/202530899920Accepté
562942GAIR-NLP factool 0.0 Code Injection21/04/202504/05/202530736520Accepté
562617handrew browserpilot 0.0 Code Injection20/04/202503/05/20253071950Dupliqué
562383handrew browserpilot 0.0 Code Injection19/04/202502/05/202530719520Accepté
559222inclusionAI AWorld 0.0 Command Injection16/04/202528/04/202530639520Accepté
558415web-arena-x webarena <=0.2.0 Code Injection15/04/202527/04/202530637620Accepté
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Rejeté
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Rejeté
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeté
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeté
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeté
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E10/04/202521/04/202530576920Accepté
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565920Accepté
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565820Accepté
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization07/04/202516/04/202530496620Accepté
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization06/04/202515/04/202530467920Accepté
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx06/04/202507/04/2025
 
0Rejeté
542529thu-pacman chitu <0.1.0 Deserialization25/03/202503/04/202530311120Accepté
542527InternLM lmdeploy <=0.7.1 Code Injection25/03/202503/04/202530310917Accepté
542520InternLM lmdeploy <=0.7.1 Deserialization25/03/202503/04/202530310817Accepté

Commits (17)

Chronologie (17)

IDEntréeCVEMise à jourModérerCP
20686235HumanSignal label-studio-ml-backend PT neural_nets.py load élévation de privilègesCVE-2025-517327/05/202527/05/202511
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely élévation de privilègesCVE-2025-515127/05/202527/05/202511
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict élévation de privilègesCVE-2025-514827/05/202527/05/202511
20686218defog-ai introspect Test integration_routes.py test_custom_tool élévation de privilègesCVE-2025-476727/05/202527/05/202511
20686217XU-YIJIE grpo-flat grpo_vanilla.py main élévation de privilègesCVE-2025-474227/05/202527/05/202511
20686216VITA-MLLM Freeze-Omni utils.py torch.load élévation de privilègesCVE-2025-470127/05/202527/05/202511
20413547GAIR-NLP factool tool.py run_single élévation de privilègesCVE-2025-426105/05/202505/05/202511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator élévation de privilègesCVE-2025-402230/04/202530/04/202511
20348680inclusionAI AWorld shell_tool.py subprocess.Popen élévation de privilègesCVE-2025-403230/04/202530/04/202511
20297878wix-incubator jam Jinja2 Template jam.pyCVE-2025-384124/04/202524/04/202511
20267006sarrionandia tournatrack Jinja2 Template check_id.py élévation de privilègesCVE-2025-380521/04/202521/04/202511
20267005thautwarm vscode-diana Jinja2 Template Gen.py élévation de privilègesCVE-2025-380421/04/202521/04/202511
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem élévation de privilègesCVE-2025-367721/04/202521/04/202511
20267003Xorbits Inference model.py load élévation de privilègesCVE-2025-362221/04/202521/04/202511
20267002thu-pacman chitu backend.py torch.load élévation de privilègesCVE-2025-316521/04/202521/04/202511
20267001InternLM LMDeploy conf.py open élévation de privilègesCVE-2025-316321/04/202521/04/202511
20267000InternLM LMDeploy PT utils.py load_weight_ckpt élévation de privilègesCVE-2025-316221/04/202521/04/202511

◂ PrécédentAperçuSuivant ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!