ybdesire

Nomeybdesire
Iscriviti25/03/2025
Punti Della Comunità669
Commits17
Invia42
Messaggi0
Voto Positivo0
RangoEsperto
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

Invia (42)

Sequenza temporale (42)

IDTitoloSottomissioneModerazioneVocePStato
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity12/05/202631/05/202636758420Accettato
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication11/05/202631/05/202636757420Accettato
824924lharries whatsapp-mcp v0.0.1 Path Traversal10/05/202631/05/202636754420Accettato
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist29/04/202626/05/202636562720Accettato
813768FoundDream miniclawd 0 Command Injection27/04/202624/05/202636543420Accettato
813767FoundDream miniclawd 0 OS Command Injection27/04/202624/05/202636543320Accettato
8090018421bit MiniClaw 0 OS Command Injection21/04/202609/05/202636245520Accettato
8081678421bit MiniClaw 0 Path Traversal20/04/202607/05/202636190120Accettato
8081668421bit MiniClaw 0 OS Command Injection20/04/202607/05/202636190020Accettato
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity28/03/202609/04/202635654020Accettato
774685pygments <=2.19.2 Denial of Service07/03/202621/03/202635232720Accettato
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx06/03/202607/03/2026
 
0Respinto
601029coldfunction qCUDA 0.0 Integer Overflow20/06/202525/06/202531382018Accettato
597382HobbesOSR kitten 0.0 Resource Consumption16/06/202519/06/202531335820Accettato
590528letta-ai letta >=v0.4.1 Code Injection05/06/202515/06/202531257020Accettato
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow31/05/202515/06/202531256220Accettato
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx26/05/202527/05/2025
 
0Respinto
578126HumanSignal label-studio-ml-backend 0.0 Deserialization15/05/202525/05/202531026120Accettato
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection10/05/202524/05/202531023920Accettato
573800FunAudioLLM InspireMusic 0.0 Deserialization08/05/202524/05/202531023620Accettato
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection05/05/202515/05/202530906820Accettato
570923XU-YIJIE grpo-flat 0.0 Deserialization04/05/202515/05/202530904220Accettato
567796VITA-MLLM Freeze-Omni 0.0 Deserialization30/04/202515/05/202530899920Accettato
562942GAIR-NLP factool 0.0 Code Injection21/04/202504/05/202530736520Accettato
562617handrew browserpilot 0.0 Code Injection20/04/202503/05/20253071950Duplicato
562383handrew browserpilot 0.0 Code Injection19/04/202502/05/202530719520Accettato
559222inclusionAI AWorld 0.0 Command Injection16/04/202528/04/202530639520Accettato
558415web-arena-x webarena <=0.2.0 Code Injection15/04/202527/04/202530637620Accettato
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Respinto
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Respinto
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Respinto
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Respinto
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Respinto
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E10/04/202521/04/202530576920Accettato
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565920Accettato
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565820Accettato
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization07/04/202516/04/202530496620Accettato
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization06/04/202515/04/202530467920Accettato
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx06/04/202507/04/2025
 
0Respinto
542529thu-pacman chitu <0.1.0 Deserialization25/03/202503/04/202530311120Accettato
542527InternLM lmdeploy <=0.7.1 Code Injection25/03/202503/04/202530310917Accettato
542520InternLM lmdeploy <=0.7.1 Deserialization25/03/202503/04/202530310817Accettato

Commits (17)

Sequenza temporale (17)

IDVoceCVEAggiornatoModerazioneCP
20686235HumanSignal label-studio-ml-backend PT neural_nets.py load escalationi di privilegiCVE-2025-517327/05/202527/05/202511
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely escalationi di privilegiCVE-2025-515127/05/202527/05/202511
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict escalationi di privilegiCVE-2025-514827/05/202527/05/202511
20686218defog-ai introspect Test integration_routes.py test_custom_tool escalationi di privilegiCVE-2025-476727/05/202527/05/202511
20686217XU-YIJIE grpo-flat grpo_vanilla.py main escalationi di privilegiCVE-2025-474227/05/202527/05/202511
20686216VITA-MLLM Freeze-Omni utils.py torch.load escalationi di privilegiCVE-2025-470127/05/202527/05/202511
20413547GAIR-NLP factool tool.py run_single escalationi di privilegiCVE-2025-426105/05/202505/05/202511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator escalationi di privilegiCVE-2025-402230/04/202530/04/202511
20348680inclusionAI AWorld shell_tool.py subprocess.Popen escalationi di privilegiCVE-2025-403230/04/202530/04/202511
20297878wix-incubator jam Jinja2 Template jam.pyCVE-2025-384124/04/202524/04/202511
20267006sarrionandia tournatrack Jinja2 Template check_id.py escalationi di privilegiCVE-2025-380521/04/202521/04/202511
20267005thautwarm vscode-diana Jinja2 Template Gen.py escalationi di privilegiCVE-2025-380421/04/202521/04/202511
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem escalationi di privilegiCVE-2025-367721/04/202521/04/202511
20267003Xorbits Inference model.py load escalationi di privilegiCVE-2025-362221/04/202521/04/202511
20267002thu-pacman chitu backend.py torch.load escalationi di privilegiCVE-2025-316521/04/202521/04/202511
20267001InternLM LMDeploy conf.py open escalationi di privilegiCVE-2025-316321/04/202521/04/202511
20267000InternLM LMDeploy PT utils.py load_weight_ckpt escalationi di privilegiCVE-2025-316221/04/202521/04/202511

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!