Yu_Bao

NomeYu_Bao
Inscrição22/08/2025
Pontos Da Comunidade561
Compromissos0
Submete44
Mensagens0
Recomendar0
PosiçãoEspecialista
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (11x)
👋 Regular Visitor
📤 Submitter (5x)

Submete (44)

Curso de tempo (44)

IDTítuloSubmissãoModeraçãoEntradaPEstado
806833ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policy17/04/202601/05/202636075520Aceite
804227Xxxxxxxxx Xxxxxx X.xx.x Xxxxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx14/04/202629/04/2026
 
0Rejeitado
803270NousResearch hermes-agent 0.8.0 Path Write Protection Bypass13/04/202629/04/202636012120Aceite
803269NousResearch hermes-agent 0.8.0 Arbitrary File Read13/04/202629/04/202636012020Aceite
802847Xxxxxx Xxxxxxx Xxxxxx X.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx11/04/202625/04/2026
 
0Rejeitado
798583666ghj MiroFish 0.1.2 Missing Authentication for Critical Functions07/04/202625/04/202635962120Aceite
798526666ghj MiroFish 0.1.2 Remote Code Execution07/04/202625/04/202635962019Aceite
797099go-kratos kratos 2.9.2 Unintended Route Exposure via DefaultServeMux Fallback04/04/202624/04/202635954520Aceite
796164AstrBotDevs AstrBot 4.22.1 Server-Side Template Injection03/04/202624/04/202635952720Aceite
795355chatboxai chatbox 1.20.0 Arbitrary Command Execution02/04/202612/04/202635699320Aceite
795345Xxx-xxxxxxx Xxx X.x.xx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx02/04/202609/04/2026
 
0Rejeitado
795212ericc-ch copilot-api 0.7.0 DNS Rebinding Attack02/04/202622/04/202635903920Aceite
794601ericc-ch copilot-api 0.7.0 Cross-Origin Token Theft via Wildcard CORS & Open Token Endpoint01/04/202620/04/202635830020Aceite
793558zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read31/03/202609/04/202635655220Aceite
793554zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access31/03/202611/04/202635699019Aceite
792661AstrBotDevs AstrBot 4.22.1 Server-Side Request Forgery (SSRF)30/03/202611/04/202635697920Aceite
792655AstrBotDevs AstrBot 4.22.1 Arbitrary Command Execution30/03/202611/04/202635697820Aceite
792653AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload30/03/202611/04/202635697720Aceite
785834Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx23/03/202605/04/2026
 
0Rejeitado
785833Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx23/03/202605/04/2026
 
0Rejeitado
785832assafelovic gpt-researcher 3.4.3 Reflected Cross-Site Scripting (XSS)23/03/202605/04/202635541520Aceite
781657Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx17/03/202622/03/2026
 
0Rejeitado
781587Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx17/03/202622/03/2026
 
0Rejeitado
780729vanna-ai vanna 2.0.2 CORS Origin Reflection with Credentials16/03/202601/04/202635465320Aceite
780727vanna-ai vanna 2.0.2 Missing Authentication on All API Endpoints16/03/202601/04/202635465220Aceite
780685Xxxxxxx Xxxxxxx X.x.x Xxxxxxxxxxxx Xxxx Xxxxxx16/03/202622/03/2026
 
0Rejeitado
780666Sanster IOPaint 1.5.3 Path Traversal - Arbitrary File Read16/03/202631/03/202635444820Aceite
779148PromtEngineer localGPT Latest (commit: 4d41c7d) Arbitrary File Read13/03/202627/03/202635389020Aceite
779122PromtEngineer localGPT Latest (commit 4d41c7d) LLM Prompt Injection via Unsanitized User Input13/03/202627/03/202635388920Aceite
778316PromtEngineer localGPT Latest (commit 4d41c7d) Unrestricted File Upload12/03/202627/03/202635388817Aceite
778315PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization12/03/202627/03/202635388720Aceite
746912Xxx-xx Xxx Xx.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx)26/01/202601/02/2026
 
0Rejeitado
686263Xxxxxx Xxxx.xx Xx.x.x Xxxx Xxxxxxxx31/10/202531/10/2025
 
0Rejeitado
648387SeriaWei ZKEACMS v4.3 Non-blind SSRF05/09/202515/09/202532389017Aceite
647629SeriaWei ZKEACMS v4.3 SSRF04/09/202520/09/202532511916Aceite
646871Harness harness v3.3.0 Login Endpoint Brute-Force03/09/202520/09/202532511617Aceite
646676Xxxxxxxxxx Xxx Xx.x.x Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx03/09/202509/09/2025
 
0Rejeitado
646674MariaDB mcp V0.1.0 Unauthorized access vulnerability03/09/202513/09/20253235070Duplicado
646673Xxxxx Xxx-xxxxx Xx.x.x Xxxxxxxxxxxx Xxxxxx03/09/202509/09/2025
 
0Rejeitado
646662litmusautomation litmus-mcp-server v0.0.1 Unauthorized access03/09/202513/09/20253235080Duplicado
639779yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF22/08/202510/09/202532348420Aceite
639778yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE22/08/202510/09/20253178570Duplicado
639777yanyutao0402 ChanCMS V3.3.0 Unauthorized SQL injection22/08/202510/09/202532348316Aceite
639748Tenda AC9 V15.03.05.19 Hard-coded Credentials22/08/202530/08/202532202220Aceite

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!