Eric-b

NomEric-b
S'inscrire11/03/2026
Points Communautaires620
Commits0
Soumet40
Des Postes0
Vote Favorable0
RangExpert
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Soumet (40)

Chronologie (40)

IDTitreSoumissionModérerEntréePStatut
855807nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-863)11/06/202613/07/20263781270Dupliqué
855806nextlevelbuilder GoClaw 3.13.2 Command Execution Policy Bypass (CWE-184)11/06/202613/07/20263781270Dupliqué
855805nextlevelbuilder GoClaw 3.13.3-beta.3 Path Traversal / Sandbox Escape (CWE-22)11/06/202613/07/202637812820Accepté
855804nextlevelbuilder GoClaw 3.11.3 Command Execution Policy Bypass (CWE-184)11/06/202613/07/202637812720Accepté
855798nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918)11/06/202613/07/202637812620Accepté
855797Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)11/06/202613/07/202637812520Accepté
855796mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59)11/06/202613/07/202637812420Accepté
855795mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)11/06/202613/07/202637812320Accepté
855793mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)11/06/202613/07/202637812220Accepté
855792mosaxiv clawlet 0.2.10 Protection Mechanism Failure (CWE-693)11/06/202613/07/202637812120Accepté
829407nextlevelbuilder GoClaw <= 3.11.3 Server-Side Request Forgery (SSRF) (CWE-918)14/05/202601/06/202636771020Accepté
829403HKUDS nanobot <= 0.1.5.post3 Missing Origin Validation in WebSockets (CWE-1385)14/05/202614/06/20263576500Dupliqué
829402NousResearch hermes-agent <= v0.12.0 Authorization Bypass Through User-Controlled Key (CWE-639)14/05/202607/06/202636908120Accepté
829401Xxxxxxxxxxxx Xxxxxx-xxxxx <= Xxxxx.x.xx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxx (x14/05/202601/06/2026
 
0Rejeté
821939nextlevelbuilder goclaw <= v3.11.3 OS Command Injection (CWE-78)07/05/202631/05/202636749820Accepté
821938nextlevelbuilder goclaw <= v3.11.3 Improper Authorization (CWE-285)07/05/202631/05/202636749720Accepté
821937nextlevelbuilder goclaw <= 3.11.3 Improper Privilege Management (CWE-269)07/05/202631/05/202636749620Accepté
821936unitedbyai droidclaw <= v0.5.3 Improper Restriction of Excessive Authentication Attempts (CWE-307)07/05/202631/05/202636749520Accepté
811276adenhq hive latest Path Traversal (CWE-22)23/04/202616/05/202636438420Accepté
811275Xxxxx-xx Xxxxx <= X.x.xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)23/04/202610/05/2026
 
0Rejeté
811274aiwaves-cn agents latest Uncontrolled Resource Consumption (CWE-400)23/04/202611/05/202636260620Accepté
811273VectifyAI PageIndex latest Infinite Loop (CWE-835)23/04/202611/05/202636260520Accepté
811175fishaudio Bert-VITS2 <= 406b79a Path Traversal (CWE-22)23/04/202616/05/202636438320Accepté
811173fishaudio Bert-VITS2 latest (commit 724d0b2) Path Traversal (CWE-22)23/04/202616/05/202636438220Accepté
797646nextchat <= 2.16.1 Server-Side Request Forgery (CWE-918) / Path Traversal (CWE-22)06/04/202627/04/202635978020Accepté
797645nextchat <= 2.16.1 Server-Side Request Forgery / SSRF (CWE-918)06/04/202627/04/202635977920Accepté
797644coze-dev coze-studio <= 0.5.1 SQL Injection (CWE-89) / Improper Input Validation (CWE-20)06/04/202625/04/202635960220Accepté
797643smythos sre <= 0.0.15 Improper Authentication / Authorization Bypass (CWE-287 / CWE-6306/04/202625/04/202635960120Accepté
797642smythos sdk <= 0.0.15 Credential Exposure / Information Disclosure (CWE-200)06/04/202625/04/202635960020Accepté
797641pyspur-dev pyspur <= 0.1.18 Server-Side Template Injection (SSTI) (CWE-1336)06/04/202625/04/20263136380Dupliqué
778273Xxxxxxx Xxxxx <= Xxxxxx Xxxxx-xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Rejeté
778272Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Rejeté
778271Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Rejeté
778270Sinaptik AI PandasAI >= 3.0.0 Code Injection (CWE-94)12/03/202627/03/202635388520Accepté
778269Sinaptik AI PandasAI <= 3.0.0 Path Traversal (CWE-22)12/03/202627/03/202635388420Accepté
778268Sinaptik AI PandasAI <= 0.1.4 SQL Injection (CWE-89)12/03/202627/03/202635388320Accepté
778267Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)12/03/202627/03/202635388220Accepté
778266Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Generation of Error Message Containing Sensitive Information (CWE-209)12/03/202627/03/202635388120Accepté
778265Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Use of Hard-coded Credentials (CWE-798)12/03/202627/03/202635388020Accepté
778264Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)12/03/202627/03/202635387920Accepté

◂ PrécédentAperçuSuivant ▸

Do you need the next level of professionalism?

Upgrade your account now!