Yu_Bao

NameYu_Bao
Signup08/22/2025
Community Points561
Commits0
Submits44
Posts0
Upvote0
RankExpert
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (11x)
👋 Regular Visitor
📤 Submitter (5x)

Submits (44)

Timeline (44)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDTitleSubmissionModerationEntryPStatus
806833ChatGPTNextWeb NextChat 2.16.1 Permissive CORS Wildcard Policy04/17/202605/01/202636075520Accepted
804227Xxxxxxxxx Xxxxxx X.xx.x Xxxxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx04/14/202604/29/2026
 
0Rejected
803270NousResearch hermes-agent 0.8.0 Path Write Protection Bypass04/13/202604/29/202636012120Accepted
803269NousResearch hermes-agent 0.8.0 Arbitrary File Read04/13/202604/29/202636012020Accepted
802847Xxxxxx Xxxxxxx Xxxxxx X.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx04/11/202604/25/2026
 
0Rejected
798583666ghj MiroFish 0.1.2 Missing Authentication for Critical Functions04/07/202604/25/202635962120Accepted
798526666ghj MiroFish 0.1.2 Remote Code Execution04/07/202604/25/202635962019Accepted
797099go-kratos kratos 2.9.2 Unintended Route Exposure via DefaultServeMux Fallback04/04/202604/24/202635954520Accepted
796164AstrBotDevs AstrBot 4.22.1 Server-Side Template Injection04/03/202604/24/202635952720Accepted
795355chatboxai chatbox 1.20.0 Arbitrary Command Execution04/02/202604/12/202635699320Accepted
795345Xxx-xxxxxxx Xxx X.x.xx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx04/02/202604/09/2026
 
0Rejected
795212ericc-ch copilot-api 0.7.0 DNS Rebinding Attack04/02/202604/22/202635903920Accepted
794601ericc-ch copilot-api 0.7.0 Cross-Origin Token Theft via Wildcard CORS & Open Token Endpoint04/01/202604/20/202635830020Accepted
793558zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Path Traversal Leading to Arbitrary File Read03/31/202604/09/202635655220Accepted
793554zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access03/31/202604/11/202635699019Accepted
792661AstrBotDevs AstrBot 4.22.1 Server-Side Request Forgery (SSRF)03/30/202604/11/202635697920Accepted
792655AstrBotDevs AstrBot 4.22.1 Arbitrary Command Execution03/30/202604/11/202635697820Accepted
792653AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload03/30/202604/11/202635697720Accepted
785834Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx03/23/202604/05/2026
 
0Rejected
785833Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx03/23/202604/05/2026
 
0Rejected
785832assafelovic gpt-researcher 3.4.3 Reflected Cross-Site Scripting (XSS)03/23/202604/05/202635541520Accepted
781657Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxx Xxxxxx Xxx Xxxxxxx/xxxxxx Xxxxxxxx03/17/202603/22/2026
 
0Rejected
781587Xxxxxxxxxxx Xxxx-xx-xxxx-xx X.x.xx Xxxx Xxxxxxxx Xxxxxxx Xxx X-xxxxxxxxx-xxx Xxx03/17/202603/22/2026
 
0Rejected
780729vanna-ai vanna 2.0.2 CORS Origin Reflection with Credentials03/16/202604/01/202635465320Accepted
780727vanna-ai vanna 2.0.2 Missing Authentication on All API Endpoints03/16/202604/01/202635465220Accepted
780685Xxxxxxx Xxxxxxx X.x.x Xxxxxxxxxxxx Xxxx Xxxxxx03/16/202603/22/2026
 
0Rejected
780666Sanster IOPaint 1.5.3 Path Traversal - Arbitrary File Read03/16/202603/31/202635444820Accepted
779148PromtEngineer localGPT Latest (commit: 4d41c7d) Arbitrary File Read03/13/202603/27/202635389020Accepted
779122PromtEngineer localGPT Latest (commit 4d41c7d) LLM Prompt Injection via Unsanitized User Input03/13/202603/27/202635388920Accepted
778316PromtEngineer localGPT Latest (commit 4d41c7d) Unrestricted File Upload03/12/202603/27/202635388817Accepted
778315PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization03/12/202603/27/202635388720Accepted
746912Xxx-xx Xxx Xx.x.x Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx)01/26/202602/01/2026
 
0Rejected
686263Xxxxxx Xxxx.xx Xx.x.x Xxxx Xxxxxxxx10/31/202510/31/2025
 
0Rejected
648387SeriaWei ZKEACMS v4.3 Non-blind SSRF09/05/202509/15/202532389017Accepted
647629SeriaWei ZKEACMS v4.3 SSRF09/04/202509/20/202532511916Accepted
646871Harness harness v3.3.0 Login Endpoint Brute-Force09/03/202509/20/202532511617Accepted
646676Xxxxxxxxxx Xxx Xx.x.x Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx09/03/202509/09/2025
 
0Rejected
646674MariaDB mcp V0.1.0 Unauthorized access vulnerability09/03/202509/13/20253235070Duplicate
646673Xxxxx Xxx-xxxxx Xx.x.x Xxxxxxxxxxxx Xxxxxx09/03/202509/09/2025
 
0Rejected
646662litmusautomation litmus-mcp-server v0.0.1 Unauthorized access09/03/202509/13/20253235080Duplicate
639779yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF08/22/202509/10/202532348420Accepted
639778yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE08/22/202509/10/20253178570Duplicate
639777yanyutao0402 ChanCMS V3.3.0 Unauthorized SQL injection08/22/202509/10/202532348316Accepted
639748Tenda AC9 V15.03.05.19 Hard-coded Credentials08/22/202508/30/202532202220Accepted

Do you need the next level of professionalism?

Upgrade your account now!