Eric-a

NomeEric-a
Inscrição11/03/2026
Pontos Da Comunidade620
Compromissos0
Submete43
Mensagens0
Recomendar0
PosiçãoEspecialista
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Submete (43)

Curso de tempo (43)

IDTítuloSubmissãoModeraçãoEntradaPEstado
922882Xxxxx Xx @xxxxx-xx/xxxxx-xxxx (xxxxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxx @xxxxx-xx/xxxx11/08/202613/09/2026
 
0Rejeitado
922881NetEase Youdao LobsterAI (lobsterai) 2026.6.15 Server-Side Request Forgery (CWE-918)11/08/202613/09/202640332120Aceite
922880CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Server-Side Request Forgery (CWE-918) / Token Exfiltration11/08/202613/09/202640331620Aceite
922879CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Incorrect Behavior Order - Validate Before Canonicalize (CWE-180) / Authorization Bypass / Path Traversal11/08/202613/09/202640331520Aceite
922878CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.2.0 Incorrect Privilege Assignment (CWE-266) / Exposure of Sensitive Information (CWE-200)11/08/202613/09/202640331420Aceite
922877cosmicstack-labs mercury-agent <= 1.2.0 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)11/08/202613/09/202640331320Aceite
922876cosmicstack-labs mercury-agent <= 1.1.13 Improper Authorization (CWE-285)11/08/202613/09/202640331220Aceite
922850HKUDS nanobot <= 0.2.1 Improper Neutralization of Argument Delimiters in a Command (CWE-88)11/08/202613/09/202640331120Aceite
922849HKUDS nanobot <= 0.2.1 Incomplete List of Disallowed Inputs (CWE-184)11/08/202613/09/202640331020Aceite
922841nanocoai nanoclaw <= 2.1.17 Improper Link Resolution Before File Access / Link Following (CWE-59)11/08/202613/09/202640330920Aceite
846028Xxxxxxxxxx-xx Xxxxxxx X.x.x Xxxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx (xxx-xx02/06/202603/07/2026
 
0Rejeitado
845599NousResearch Hermes Agent <= v2026.5.16 Path Traversal / Improper Limitation of a Pathname to a Restricted Directory (CWE-22)02/06/202603/07/202637614420Aceite
845598NousResearch Hermes Agent <= 75cbdfd06b Improper Authentication (CWE-287)02/06/202603/07/202637614320Aceite
845596NousResearch Hermes Agent <= v2026.4.30 Insufficient Verification of Data Authenticity (CWE-345)02/06/202603/07/202637614220Aceite
845595NousResearch Hermes Agent 75cbdfd06bb041936f164c8d75ac518b2cb4fec0 Protection Mechanism Failure (CWE-693)02/06/202603/07/202637614120Aceite
844665AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)01/06/202611/07/202637780820Aceite
844659AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)01/06/202611/07/202637780720Aceite
844658AstrBotDevs AstrBot 4.25.2 Code Injection (CWE-94)01/06/202611/07/20263569780Duplicado
844656AstrBotDevs AstrBot 4.25.2 Improper Authorization (CWE-285)01/06/202611/07/202637780620Aceite
844655Xxxx Xxxxxxxx Xxxxxx-xxxxx Xx.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx 01/06/202603/07/2026
 
0Rejeitado
844654Nous Research hermes-agent v2026.4.30 Improper Handling of Case Sensitivity Leading to Information Disclosure (CWE-178)01/06/202603/07/202637613420Aceite
821929zhayujie chatgpt-on-wechat <= 2.0.7 OS Command Injection (CWE-78)07/05/202631/05/202636749320Aceite
821928Xxxxxxxx Xxxxxxx-xx-xxxxxx <= X.x.x Xxxx Xxxxxxxxx (xxx-xx)07/05/202631/05/2026
 
0Rejeitado
821925AstrBotDevs AstrBot 4.24.2 Path Traversal (CWE-22)07/05/202631/05/20263643810Duplicado
821924AstrBotDevs AstrBot 4.23.6 Path Traversal (CWE-22)07/05/202631/05/202636749220Aceite
821923AstrBotDevs AstrBot 4.24.2 Insecure Direct Object Reference (CWE-639)07/05/202631/05/202636749120Aceite
821922AstrBotDevs AstrBot 4.23.6 Use of Default Credentials (CWE-1392)07/05/202631/05/20263604200Duplicado
821921AstrBotDevs AstrBot 4.23.6 Incorrect Authorization (CWE-863)07/05/202631/05/202636749020Aceite
821920AstrBotDevs AstrBot 4.23.6 Prompt Injection (CWE-74)07/05/202631/05/202636748920Aceite
811172AstrBotDevs AstrBot latest Path Traversal (CWE-22)23/04/202616/05/202636438120Aceite
811144Xxxxxxxxxxx Xxxxx X.x.x Xxxxxxxx Xxxxxxxxxxxxxxx / Xxxxxxx Xxxxxxxxxxxxxx (xxx-x23/04/202610/05/2026
 
0Rejeitado
791090Xxxxxxxxx Xxxxxx <= Xxxxxxx Xxxx Xxxxxxxxx (xxx-xx)27/03/202619/04/2026
 
0Rejeitado
791089serge-chat serge <= 3cb250c Missing Authentication for Critical Function (CWE-306)27/03/202619/04/202635822320Aceite
778263Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xx12/03/202615/03/2026
 
0Rejeitado
778262Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx Xxx (x12/03/202615/03/2026
 
0Rejeitado
777668FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127920Aceite
777662FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127820Aceite
777661FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)11/03/202606/05/202636127720Aceite
777660FlowiseAI Flowise <= 3.0.12 OS Command Injection (CWE-78)11/03/202606/05/20263587530Duplicado
777659FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)11/03/202606/05/202636127620Aceite
777658FlowiseAI Flowise <= 3.0.12 Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)11/03/202606/05/202636127520Aceite
777657FlowiseAI Flowise <= 3.0.12 Authorization Bypass Through User-Controlled Key (CWE-639)11/03/202606/05/202636127420Aceite
777656FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)11/03/202606/05/202636127320Aceite

Do you know our Splunk app?

Download it now for free!