Yu_Bao

NomYu_Bao
S'inscrire22/08/2025
Points Communautaires561
Commits0
Soumet44
Des Postes0
Vote Favorable0
RangExpert
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (11x)
👋 Regular Visitor
📤 Submitter (5x)

Soumet (44)

Chronologie (44)

IDTitreSoumissionModérerEntréePStatut
806833ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policy17/04/202601/05/202636075520Accepté
804227Xxxxxxxxx Xxxxxx X.xx.x Xxxxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx14/04/202629/04/2026
 
0Rejeté
803270NousResearch hermes-agent 0.8.0 Path Write Protection Bypass13/04/202629/04/202636012120Accepté
803269NousResearch hermes-agent 0.8.0 Arbitrary File Read13/04/202629/04/202636012020Accepté
802847Xxxxxx Xxxxxxx Xxxxxx X.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx11/04/202625/04/2026
 
0Rejeté
798583666ghj MiroFish 0.1.2 Missing Authentication for Critical Functions07/04/202625/04/202635962120Accepté
798526666ghj MiroFish 0.1.2 Remote Code Execution07/04/202625/04/202635962019Accepté
797099go-kratos kratos 2.9.2 Unintended Route Exposure via DefaultServeMux Fallback04/04/202624/04/202635954520Accepté
796164AstrBotDevs AstrBot 4.22.1 Server-Side Template Injection03/04/202624/04/202635952720Accepté
795355chatboxai chatbox 1.20.0 Arbitrary Command Execution02/04/202612/04/202635699320Accepté
795345Xxx-xxxxxxx Xxx X.x.xx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx02/04/202609/04/2026
 
0Rejeté
795212ericc-ch copilot-api 0.7.0 DNS Rebinding Attack02/04/202622/04/202635903920Accepté
794601ericc-ch copilot-api 0.7.0 Cross-Origin Token Theft via Wildcard CORS & Open Token Endpoint01/04/202620/04/202635830020Accepté
793558zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read31/03/202609/04/202635655220Accepté
793554zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access31/03/202611/04/202635699019Accepté
792661AstrBotDevs AstrBot 4.22.1 Server-Side Request Forgery (SSRF)30/03/202611/04/202635697920Accepté
792655AstrBotDevs AstrBot 4.22.1 Arbitrary Command Execution30/03/202611/04/202635697820Accepté
792653AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload30/03/202611/04/202635697720Accepté
785834Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx23/03/202605/04/2026
 
0Rejeté
785833Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx23/03/202605/04/2026
 
0Rejeté
785832assafelovic gpt-researcher 3.4.3 Reflected Cross-Site Scripting (XSS)23/03/202605/04/202635541520Accepté
781657Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx17/03/202622/03/2026
 
0Rejeté
781587Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx17/03/202622/03/2026
 
0Rejeté
780729vanna-ai vanna 2.0.2 CORS Origin Reflection with Credentials16/03/202601/04/202635465320Accepté
780727vanna-ai vanna 2.0.2 Missing Authentication on All API Endpoints16/03/202601/04/202635465220Accepté
780685Xxxxxxx Xxxxxxx X.x.x Xxxxxxxxxxxx Xxxx Xxxxxx16/03/202622/03/2026
 
0Rejeté
780666Sanster IOPaint 1.5.3 Path Traversal - Arbitrary File Read16/03/202631/03/202635444820Accepté
779148PromtEngineer localGPT Latest (commit: 4d41c7d) Arbitrary File Read13/03/202627/03/202635389020Accepté
779122PromtEngineer localGPT Latest (commit 4d41c7d) LLM Prompt Injection via Unsanitized User Input13/03/202627/03/202635388920Accepté
778316PromtEngineer localGPT Latest (commit 4d41c7d) Unrestricted File Upload12/03/202627/03/202635388817Accepté
778315PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization12/03/202627/03/202635388720Accepté
746912Xxx-xx Xxx Xx.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx)26/01/202601/02/2026
 
0Rejeté
686263Xxxxxx Xxxx.xx Xx.x.x Xxxx Xxxxxxxx31/10/202531/10/2025
 
0Rejeté
648387SeriaWei ZKEACMS v4.3 Non-blind SSRF05/09/202515/09/202532389017Accepté
647629SeriaWei ZKEACMS v4.3 SSRF04/09/202520/09/202532511916Accepté
646871Harness harness v3.3.0 Login Endpoint Brute-Force03/09/202520/09/202532511617Accepté
646676Xxxxxxxxxx Xxx Xx.x.x Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx03/09/202509/09/2025
 
0Rejeté
646674MariaDB mcp V0.1.0 Unauthorized access vulnerability03/09/202513/09/20253235070Dupliqué
646673Xxxxx Xxx-xxxxx Xx.x.x Xxxxxxxxxxxx Xxxxxx03/09/202509/09/2025
 
0Rejeté
646662litmusautomation litmus-mcp-server v0.0.1 Unauthorized access03/09/202513/09/20253235080Dupliqué
639779yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF22/08/202510/09/202532348420Accepté
639778yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE22/08/202510/09/20253178570Dupliqué
639777yanyutao0402 ChanCMS V3.3.0 Unauthorized SQL injection22/08/202510/09/202532348316Accepté
639748Tenda AC9 V15.03.05.19 Hard-coded Credentials22/08/202530/08/202532202220Accepté

◂ PrécédentAperçuSuivant ▸

Interested in the pricing of exploits?

See the underground prices here!