ybdesire

Nameybdesire
Signup03/25/2025
Community Points669
Commits17
Submits42
Posts0
Upvote0
RankExpert
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

Submits (42)

Timeline (42)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDTitleSubmissionModerationEntryPStatus
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity05/12/202605/31/202636758420Accepted
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication05/11/202605/31/202636757420Accepted
824924lharries whatsapp-mcp v0.0.1 Path Traversal05/10/202605/31/202636754420Accepted
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist04/29/202605/26/202636562720Accepted
813768FoundDream miniclawd 0 Command Injection04/27/202605/24/202636543420Accepted
813767FoundDream miniclawd 0 OS Command Injection04/27/202605/24/202636543320Accepted
8090018421bit MiniClaw 0 OS Command Injection04/21/202605/09/202636245520Accepted
8081678421bit MiniClaw 0 Path Traversal04/20/202605/07/202636190120Accepted
8081668421bit MiniClaw 0 OS Command Injection04/20/202605/07/202636190020Accepted
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity03/28/202604/09/202635654020Accepted
774685pygments <=2.19.2 Denial of Service03/07/202603/21/202635232720Accepted
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx03/06/202603/07/2026
 
0Rejected
601029coldfunction qCUDA 0.0 Integer Overflow06/20/202506/25/202531382018Accepted
597382HobbesOSR kitten 0.0 Resource Consumption06/16/202506/19/202531335820Accepted
590528letta-ai letta >=v0.4.1 Code Injection06/05/202506/15/202531257020Accepted
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow05/31/202506/15/202531256220Accepted
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx05/26/202505/27/2025
 
0Rejected
578126HumanSignal label-studio-ml-backend 0.0 Deserialization05/15/202505/25/202531026120Accepted
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection05/10/202505/24/202531023920Accepted
573800FunAudioLLM InspireMusic 0.0 Deserialization05/08/202505/24/202531023620Accepted
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection05/05/202505/15/202530906820Accepted
570923XU-YIJIE grpo-flat 0.0 Deserialization05/04/202505/15/202530904220Accepted
567796VITA-MLLM Freeze-Omni 0.0 Deserialization04/30/202505/15/202530899920Accepted
562942GAIR-NLP factool 0.0 Code Injection04/21/202505/04/202530736520Accepted
562617handrew browserpilot 0.0 Code Injection04/20/202505/03/20253071950Duplicate
562383handrew browserpilot 0.0 Code Injection04/19/202505/02/202530719520Accepted
559222inclusionAI AWorld 0.0 Command Injection04/16/202504/28/202530639520Accepted
558415web-arena-x webarena <=0.2.0 Code Injection04/15/202504/27/202530637620Accepted
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx04/10/202504/21/2025
 
0Rejected
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx04/10/202504/21/2025
 
0Rejected
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx04/10/202504/19/2025
 
0Rejected
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx04/10/202504/19/2025
 
0Rejected
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx04/10/202504/19/2025
 
0Rejected
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E04/10/202504/21/202530576920Accepted
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E04/09/202504/18/202530565920Accepted
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E04/09/202504/18/202530565820Accepted
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization04/07/202504/16/202530496620Accepted
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization04/06/202504/15/202530467920Accepted
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx04/06/202504/07/2025
 
0Rejected
542529thu-pacman chitu <0.1.0 Deserialization03/25/202504/03/202530311120Accepted
542527InternLM lmdeploy <=0.7.1 Code Injection03/25/202504/03/202530310917Accepted
542520InternLM lmdeploy <=0.7.1 Deserialization03/25/202504/03/202530310817Accepted

Commits (17)

Timeline (17)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDEntryCVEUpdatedModerationCP
20686235HumanSignal label-studio-ml-backend PT File neural_nets.py load deserializationCVE-2025-517305/27/202505/27/202511
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely code injectionCVE-2025-515105/27/202505/27/202511
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserializationCVE-2025-514805/27/202505/27/202511
20686218defog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injectionCVE-2025-476705/27/202505/27/202511
20686217XU-YIJIE grpo-flat grpo_vanilla.py main deserializationCVE-2025-474205/27/202505/27/202511
20686216VITA-MLLM Freeze-Omni utils.py torch.load deserializationCVE-2025-470105/27/202505/27/202511
20413547GAIR-NLP factool tool.py run_single code injectionCVE-2025-426105/05/202505/05/202511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator code injectionCVE-2025-402204/30/202504/30/202511
20348680inclusionAI AWorld shell_tool.py subprocess.Popen os command injectionCVE-2025-403204/30/202504/30/202511
20297878wix-incubator jam Jinja2 Template jam.py special elements in template engineCVE-2025-384104/24/202504/24/202511
20267006sarrionandia tournatrack Jinja2 Template check_id.py injectionCVE-2025-380504/21/202504/21/202511
20267005thautwarm vscode-diana Jinja2 Template Gen.py injectionCVE-2025-380404/21/202504/21/202511
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserializationCVE-2025-367704/21/202504/21/202511
20267003Xorbits Inference model.py load deserializationCVE-2025-362204/21/202504/21/202511
20267002thu-pacman chitu backend.py torch.load deserializationCVE-2025-316504/21/202504/21/202511
20267001InternLM LMDeploy conf.py open code injectionCVE-2025-316304/21/202504/21/202511
20267000InternLM LMDeploy PT File utils.py load_weight_ckpt deserializationCVE-2025-316204/21/202504/21/202511

Want to know what is going to be exploited?

We predict KEV entries!