Eric-a

NomeEric-a
Iscriviti11/03/2026
Punti Della Comunità620
Commits0
Invia43
Messaggi0
Voto Positivo0
RangoEsperto
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Invia (43)

Sequenza temporale (43)

IDTitoloSottomissioneModerazioneVocePStato
922882Xxxxx Xx @xxxxx-xx/xxxxx-xxxx (xxxxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxx @xxxxx-xx/xxxx11/08/202613/09/2026
 
0Respinto
922881NetEase Youdao LobsterAI (lobsterai) 2026.6.15 Server-Side Request Forgery (CWE-918)11/08/202613/09/202640332120Accettato
922880CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Server-Side Request Forgery (CWE-918) / Token Exfiltration11/08/202613/09/202640331620Accettato
922879CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Incorrect Behavior Order - Validate Before Canonicalize (CWE-180) / Authorization Bypass / Path Traversal11/08/202613/09/202640331520Accettato
922878CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.2.0 Incorrect Privilege Assignment (CWE-266) / Exposure of Sensitive Information (CWE-200)11/08/202613/09/202640331420Accettato
922877cosmicstack-labs mercury-agent <= 1.2.0 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)11/08/202613/09/202640331320Accettato
922876cosmicstack-labs mercury-agent <= 1.1.13 Improper Authorization (CWE-285)11/08/202613/09/202640331220Accettato
922850HKUDS nanobot <= 0.2.1 Improper Neutralization of Argument Delimiters in a Command (CWE-88)11/08/202613/09/202640331120Accettato
922849HKUDS nanobot <= 0.2.1 Incomplete List of Disallowed Inputs (CWE-184)11/08/202613/09/202640331020Accettato
922841nanocoai nanoclaw <= 2.1.17 Improper Link Resolution Before File Access / Link Following (CWE-59)11/08/202613/09/202640330920Accettato
846028Xxxxxxxxxx-xx Xxxxxxx X.x.x Xxxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx (xxx-xx02/06/202603/07/2026
 
0Respinto
845599NousResearch Hermes Agent <= v2026.5.16 Path Traversal / Improper Limitation of a Pathname to a Restricted Directory (CWE-22)02/06/202603/07/202637614420Accettato
845598NousResearch Hermes Agent <= 75cbdfd06b Improper Authentication (CWE-287)02/06/202603/07/202637614320Accettato
845596NousResearch Hermes Agent <= v2026.4.30 Insufficient Verification of Data Authenticity (CWE-345)02/06/202603/07/202637614220Accettato
845595NousResearch Hermes Agent 75cbdfd06bb041936f164c8d75ac518b2cb4fec0 Protection Mechanism Failure (CWE-693)02/06/202603/07/202637614120Accettato
844665AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)01/06/202611/07/202637780820Accettato
844659AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)01/06/202611/07/202637780720Accettato
844658AstrBotDevs AstrBot 4.25.2 Code Injection (CWE-94)01/06/202611/07/20263569780Duplicato
844656AstrBotDevs AstrBot 4.25.2 Improper Authorization (CWE-285)01/06/202611/07/202637780620Accettato
844655Xxxx Xxxxxxxx Xxxxxx-xxxxx Xx.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx 01/06/202603/07/2026
 
0Respinto
844654Nous Research hermes-agent v2026.4.30 Improper Handling of Case Sensitivity Leading to Information Disclosure (CWE-178)01/06/202603/07/202637613420Accettato
821929zhayujie chatgpt-on-wechat <= 2.0.7 OS Command Injection (CWE-78)07/05/202631/05/202636749320Accettato
821928Xxxxxxxx Xxxxxxx-xx-xxxxxx <= X.x.x Xxxx Xxxxxxxxx (xxx-xx)07/05/202631/05/2026
 
0Respinto
821925AstrBotDevs AstrBot 4.24.2 Path Traversal (CWE-22)07/05/202631/05/20263643810Duplicato
821924AstrBotDevs AstrBot 4.23.6 Path Traversal (CWE-22)07/05/202631/05/202636749220Accettato
821923AstrBotDevs AstrBot 4.24.2 Insecure Direct Object Reference (CWE-639)07/05/202631/05/202636749120Accettato
821922AstrBotDevs AstrBot 4.23.6 Use of Default Credentials (CWE-1392)07/05/202631/05/20263604200Duplicato
821921AstrBotDevs AstrBot 4.23.6 Incorrect Authorization (CWE-863)07/05/202631/05/202636749020Accettato
821920AstrBotDevs AstrBot 4.23.6 Prompt Injection (CWE-74)07/05/202631/05/202636748920Accettato
811172AstrBotDevs AstrBot latest Path Traversal (CWE-22)23/04/202616/05/202636438120Accettato
811144Xxxxxxxxxxx Xxxxx X.x.x Xxxxxxxx Xxxxxxxxxxxxxxx / Xxxxxxx Xxxxxxxxxxxxxx (xxx-x23/04/202610/05/2026
 
0Respinto
791090Xxxxxxxxx Xxxxxx <= Xxxxxxx Xxxx Xxxxxxxxx (xxx-xx)27/03/202619/04/2026
 
0Respinto
791089serge-chat serge <= 3cb250c Missing Authentication for Critical Function (CWE-306)27/03/202619/04/202635822320Accettato
778263Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xx12/03/202615/03/2026
 
0Respinto
778262Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx Xxx (x12/03/202615/03/2026
 
0Respinto
777668FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127920Accettato
777662FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127820Accettato
777661FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127720Accettato
777660FlowiseAI Flowise <= 3.0.12 OS Command Injection (CWE-78)11/03/202606/05/20263587530Duplicato
777659FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)11/03/202606/05/202636127620Accettato
777658FlowiseAI Flowise <= 3.0.12 Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)11/03/202606/05/202636127520Accettato
777657FlowiseAI Flowise <= 3.0.12 Authorization Bypass Through User-Controlled Key (CWE-639)11/03/202606/05/202636127420Accettato
777656FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)11/03/202606/05/202636127320Accettato

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!