Eric-b

NomeEric-b
Iscriviti11/03/2026
Punti Della Comunità620
Commits0
Invia40
Messaggi0
Voto Positivo0
RangoEsperto
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Invia (40)

Sequenza temporale (40)

IDTitoloSottomissioneModerazioneVocePStato
855807nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-863)11/06/202613/07/20263781270Duplicato
855806nextlevelbuilder GoClaw 3.13.2 Command Execution Policy Bypass (CWE-184)11/06/202613/07/20263781270Duplicato
855805nextlevelbuilder GoClaw 3.13.3-beta.3 Path Traversal / Sandbox Escape (CWE-22)11/06/202613/07/202637812820Accettato
855804nextlevelbuilder GoClaw 3.11.3 Command Execution Policy Bypass (CWE-184)11/06/202613/07/202637812720Accettato
855798nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918)11/06/202613/07/202637812620Accettato
855797Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)11/06/202613/07/202637812520Accettato
855796mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59)11/06/202613/07/202637812420Accettato
855795mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)11/06/202613/07/202637812320Accettato
855793mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)11/06/202613/07/202637812220Accettato
855792mosaxiv clawlet 0.2.10 Protection Mechanism Failure (CWE-693)11/06/202613/07/202637812120Accettato
829407nextlevelbuilder GoClaw <= 3.11.3 Server-Side Request Forgery (SSRF) (CWE-918)14/05/202601/06/202636771020Accettato
829403HKUDS nanobot <= 0.1.5.post3 Missing Origin Validation in WebSockets (CWE-1385)14/05/202614/06/20263576500Duplicato
829402NousResearch hermes-agent <= v0.12.0 Authorization Bypass Through User-Controlled Key (CWE-639)14/05/202607/06/202636908120Accettato
829401Xxxxxxxxxxxx Xxxxxx-xxxxx <= Xxxxx.x.xx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxx (x14/05/202601/06/2026
 
0Respinto
821939nextlevelbuilder goclaw <= v3.11.3 OS Command Injection (CWE-78)07/05/202631/05/202636749820Accettato
821938nextlevelbuilder goclaw <= v3.11.3 Improper Authorization (CWE-285)07/05/202631/05/202636749720Accettato
821937nextlevelbuilder goclaw <= 3.11.3 Improper Privilege Management (CWE-269)07/05/202631/05/202636749620Accettato
821936unitedbyai droidclaw <= v0.5.3 Improper Restriction of Excessive Authentication Attempts (CWE-307)07/05/202631/05/202636749520Accettato
811276adenhq hive latest Path Traversal (CWE-22)23/04/202616/05/202636438420Accettato
811275Xxxxx-xx Xxxxx <= X.x.xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)23/04/202610/05/2026
 
0Respinto
811274aiwaves-cn agents latest Uncontrolled Resource Consumption (CWE-400)23/04/202611/05/202636260620Accettato
811273VectifyAI PageIndex latest Infinite Loop (CWE-835)23/04/202611/05/202636260520Accettato
811175fishaudio Bert-VITS2 <= 406b79a Path Traversal (CWE-22)23/04/202616/05/202636438320Accettato
811173fishaudio Bert-VITS2 latest (commit 724d0b2) Path Traversal (CWE-22)23/04/202616/05/202636438220Accettato
797646nextchat <= 2.16.1 Server-Side Request Forgery (CWE-918) / Path Traversal (CWE-22)06/04/202627/04/202635978020Accettato
797645nextchat <= 2.16.1 Server-Side Request Forgery / SSRF (CWE-918)06/04/202627/04/202635977920Accettato
797644coze-dev coze-studio <= 0.5.1 SQL Injection (CWE-89) / Improper Input Validation (CWE-20)06/04/202625/04/202635960220Accettato
797643smythos sre <= 0.0.15 Improper Authentication / Authorization Bypass (CWE-287 / CWE-6306/04/202625/04/202635960120Accettato
797642smythos sdk <= 0.0.15 Credential Exposure / Information Disclosure (CWE-200)06/04/202625/04/202635960020Accettato
797641pyspur-dev pyspur <= 0.1.18 Server-Side Template Injection (SSTI) (CWE-1336)06/04/202625/04/20263136380Duplicato
778273Xxxxxxx Xxxxx <= Xxxxxx Xxxxx-xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Respinto
778272Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Respinto
778271Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)12/03/202627/03/2026
 
0Respinto
778270Sinaptik AI PandasAI >= 3.0.0 Code Injection (CWE-94)12/03/202627/03/202635388520Accettato
778269Sinaptik AI PandasAI <= 3.0.0 Path Traversal (CWE-22)12/03/202627/03/202635388420Accettato
778268Sinaptik AI PandasAI <= 0.1.4 SQL Injection (CWE-89)12/03/202627/03/202635388320Accettato
778267Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)12/03/202627/03/202635388220Accettato
778266Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Generation of Error Message Containing Sensitive Information (CWE-209)12/03/202627/03/202635388120Accettato
778265Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Use of Hard-coded Credentials (CWE-798)12/03/202627/03/202635388020Accettato
778264Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)12/03/202627/03/202635387920Accettato

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!