ybdesire

Nomeybdesire
Inscrição25/03/2025
Pontos Da Comunidade669
Compromissos17
Submete42
Mensagens0
Recomendar0
PosiçãoEspecialista
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

Submete (42)

Curso de tempo (42)

IDTítuloSubmissãoModeraçãoEntradaPEstado
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity12/05/202631/05/202636758420Aceite
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication11/05/202631/05/202636757420Aceite
824924lharries whatsapp-mcp v0.0.1 Path Traversal10/05/202631/05/202636754420Aceite
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist29/04/202626/05/202636562720Aceite
813768FoundDream miniclawd 0 Command Injection27/04/202624/05/202636543420Aceite
813767FoundDream miniclawd 0 OS Command Injection27/04/202624/05/202636543320Aceite
8090018421bit MiniClaw 0 OS Command Injection21/04/202609/05/202636245520Aceite
8081678421bit MiniClaw 0 Path Traversal20/04/202607/05/202636190120Aceite
8081668421bit MiniClaw 0 OS Command Injection20/04/202607/05/202636190020Aceite
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity28/03/202609/04/202635654020Aceite
774685pygments <=2.19.2 Denial of Service07/03/202621/03/202635232720Aceite
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx06/03/202607/03/2026
 
0Rejeitado
601029coldfunction qCUDA 0.0 Integer Overflow20/06/202525/06/202531382018Aceite
597382HobbesOSR kitten 0.0 Resource Consumption16/06/202519/06/202531335820Aceite
590528letta-ai letta >=v0.4.1 Code Injection05/06/202515/06/202531257020Aceite
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow31/05/202515/06/202531256220Aceite
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx26/05/202527/05/2025
 
0Rejeitado
578126HumanSignal label-studio-ml-backend 0.0 Deserialization15/05/202525/05/202531026120Aceite
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection10/05/202524/05/202531023920Aceite
573800FunAudioLLM InspireMusic 0.0 Deserialization08/05/202524/05/202531023620Aceite
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection05/05/202515/05/202530906820Aceite
570923XU-YIJIE grpo-flat 0.0 Deserialization04/05/202515/05/202530904220Aceite
567796VITA-MLLM Freeze-Omni 0.0 Deserialization30/04/202515/05/202530899920Aceite
562942GAIR-NLP factool 0.0 Code Injection21/04/202504/05/202530736520Aceite
562617handrew browserpilot 0.0 Code Injection20/04/202503/05/20253071950Duplicado
562383handrew browserpilot 0.0 Code Injection19/04/202502/05/202530719520Aceite
559222inclusionAI AWorld 0.0 Command Injection16/04/202528/04/202530639520Aceite
558415web-arena-x webarena <=0.2.0 Code Injection15/04/202527/04/202530637620Aceite
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Rejeitado
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx10/04/202521/04/2025
 
0Rejeitado
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeitado
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeitado
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx10/04/202519/04/2025
 
0Rejeitado
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E10/04/202521/04/202530576920Aceite
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565920Aceite
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E09/04/202518/04/202530565820Aceite
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization07/04/202516/04/202530496620Aceite
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization06/04/202515/04/202530467920Aceite
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx06/04/202507/04/2025
 
0Rejeitado
542529thu-pacman chitu <0.1.0 Deserialization25/03/202503/04/202530311120Aceite
542527InternLM lmdeploy <=0.7.1 Code Injection25/03/202503/04/202530310917Aceite
542520InternLM lmdeploy <=0.7.1 Deserialization25/03/202503/04/202530310817Aceite

Compromissos (17)

Curso de tempo (17)

IDEntradaCVEAtualizadoModeraçãoAP
20686235HumanSignal label-studio-ml-backend PT neural_nets.py load Elevação de PrivilégiosCVE-2025-517327/05/202527/05/202511
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely Elevação de PrivilégiosCVE-2025-515127/05/202527/05/202511
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict Elevação de PrivilégiosCVE-2025-514827/05/202527/05/202511
20686218defog-ai introspect Test integration_routes.py test_custom_tool Elevação de PrivilégiosCVE-2025-476727/05/202527/05/202511
20686217XU-YIJIE grpo-flat grpo_vanilla.py main Elevação de PrivilégiosCVE-2025-474227/05/202527/05/202511
20686216VITA-MLLM Freeze-Omni utils.py torch.load Elevação de PrivilégiosCVE-2025-470127/05/202527/05/202511
20413547GAIR-NLP factool tool.py run_single Elevação de PrivilégiosCVE-2025-426105/05/202505/05/202511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator Elevação de PrivilégiosCVE-2025-402230/04/202530/04/202511
20348680inclusionAI AWorld shell_tool.py subprocess.Popen Elevação de PrivilégiosCVE-2025-403230/04/202530/04/202511
20297878wix-incubator jam Jinja2 Template jam.pyCVE-2025-384124/04/202524/04/202511
20267006sarrionandia tournatrack Jinja2 Template check_id.py Elevação de PrivilégiosCVE-2025-380521/04/202521/04/202511
20267005thautwarm vscode-diana Jinja2 Template Gen.py Elevação de PrivilégiosCVE-2025-380421/04/202521/04/202511
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem Elevação de PrivilégiosCVE-2025-367721/04/202521/04/202511
20267003Xorbits Inference model.py load Elevação de PrivilégiosCVE-2025-362221/04/202521/04/202511
20267002thu-pacman chitu backend.py torch.load Elevação de PrivilégiosCVE-2025-316521/04/202521/04/202511
20267001InternLM LMDeploy conf.py open Elevação de PrivilégiosCVE-2025-316321/04/202521/04/202511
20267000InternLM LMDeploy PT utils.py load_weight_ckpt Elevação de PrivilégiosCVE-2025-316221/04/202521/04/202511

◂ VoltarVisão GeralPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!