Yu_Bao

NomeYu_Bao
Iscriviti22/08/2025
Punti Della Comunità561
Commits0
Invia44
Messaggi0
Voto Positivo0
RangoEsperto
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (11x)
👋 Regular Visitor
📤 Submitter (5x)

Invia (44)

Sequenza temporale (44)

IDTitoloSottomissioneModerazioneVocePStato
806833ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policy17/04/202601/05/202636075520Accettato
804227Xxxxxxxxx Xxxxxx X.xx.x Xxxxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx14/04/202629/04/2026
 
0Respinto
803270NousResearch hermes-agent 0.8.0 Path Write Protection Bypass13/04/202629/04/202636012120Accettato
803269NousResearch hermes-agent 0.8.0 Arbitrary File Read13/04/202629/04/202636012020Accettato
802847Xxxxxx Xxxxxxx Xxxxxx X.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx11/04/202625/04/2026
 
0Respinto
798583666ghj MiroFish 0.1.2 Missing Authentication for Critical Functions07/04/202625/04/202635962120Accettato
798526666ghj MiroFish 0.1.2 Remote Code Execution07/04/202625/04/202635962019Accettato
797099go-kratos kratos 2.9.2 Unintended Route Exposure via DefaultServeMux Fallback04/04/202624/04/202635954520Accettato
796164AstrBotDevs AstrBot 4.22.1 Server-Side Template Injection03/04/202624/04/202635952720Accettato
795355chatboxai chatbox 1.20.0 Arbitrary Command Execution02/04/202612/04/202635699320Accettato
795345Xxx-xxxxxxx Xxx X.x.xx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx02/04/202609/04/2026
 
0Respinto
795212ericc-ch copilot-api 0.7.0 DNS Rebinding Attack02/04/202622/04/202635903920Accettato
794601ericc-ch copilot-api 0.7.0 Cross-Origin Token Theft via Wildcard CORS & Open Token Endpoint01/04/202620/04/202635830020Accettato
793558zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read31/03/202609/04/202635655220Accettato
793554zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access31/03/202611/04/202635699019Accettato
792661AstrBotDevs AstrBot 4.22.1 Server-Side Request Forgery (SSRF)30/03/202611/04/202635697920Accettato
792655AstrBotDevs AstrBot 4.22.1 Arbitrary Command Execution30/03/202611/04/202635697820Accettato
792653AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload30/03/202611/04/202635697720Accettato
785834Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx23/03/202605/04/2026
 
0Respinto
785833Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx23/03/202605/04/2026
 
0Respinto
785832assafelovic gpt-researcher 3.4.3 Reflected Cross-Site Scripting (XSS)23/03/202605/04/202635541520Accettato
781657Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx17/03/202622/03/2026
 
0Respinto
781587Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx17/03/202622/03/2026
 
0Respinto
780729vanna-ai vanna 2.0.2 CORS Origin Reflection with Credentials16/03/202601/04/202635465320Accettato
780727vanna-ai vanna 2.0.2 Missing Authentication on All API Endpoints16/03/202601/04/202635465220Accettato
780685Xxxxxxx Xxxxxxx X.x.x Xxxxxxxxxxxx Xxxx Xxxxxx16/03/202622/03/2026
 
0Respinto
780666Sanster IOPaint 1.5.3 Path Traversal - Arbitrary File Read16/03/202631/03/202635444820Accettato
779148PromtEngineer localGPT Latest (commit: 4d41c7d) Arbitrary File Read13/03/202627/03/202635389020Accettato
779122PromtEngineer localGPT Latest (commit 4d41c7d) LLM Prompt Injection via Unsanitized User Input13/03/202627/03/202635388920Accettato
778316PromtEngineer localGPT Latest (commit 4d41c7d) Unrestricted File Upload12/03/202627/03/202635388817Accettato
778315PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization12/03/202627/03/202635388720Accettato
746912Xxx-xx Xxx Xx.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx)26/01/202601/02/2026
 
0Respinto
686263Xxxxxx Xxxx.xx Xx.x.x Xxxx Xxxxxxxx31/10/202531/10/2025
 
0Respinto
648387SeriaWei ZKEACMS v4.3 Non-blind SSRF05/09/202515/09/202532389017Accettato
647629SeriaWei ZKEACMS v4.3 SSRF04/09/202520/09/202532511916Accettato
646871Harness harness v3.3.0 Login Endpoint Brute-Force03/09/202520/09/202532511617Accettato
646676Xxxxxxxxxx Xxx Xx.x.x Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx03/09/202509/09/2025
 
0Respinto
646674MariaDB mcp V0.1.0 Unauthorized access vulnerability03/09/202513/09/20253235070Duplicato
646673Xxxxx Xxx-xxxxx Xx.x.x Xxxxxxxxxxxx Xxxxxx03/09/202509/09/2025
 
0Respinto
646662litmusautomation litmus-mcp-server v0.0.1 Unauthorized access03/09/202513/09/20253235080Duplicato
639779yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF22/08/202510/09/202532348420Accettato
639778yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE22/08/202510/09/20253178570Duplicato
639777yanyutao0402 ChanCMS V3.3.0 Unauthorized SQL injection22/08/202510/09/202532348316Accettato
639748Tenda AC9 V15.03.05.19 Hard-coded Credentials22/08/202530/08/202532202220Accettato

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!