Eric-b

NameEric-b
Signup03/11/2026
Community Points620
Commits0
Submits40
Posts0
Upvote0
RankExpert
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

Submits (40)

Timeline (40)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDTitleSubmissionModerationEntryPStatus
855807nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-863)06/11/202607/13/20263781270Duplicate
855806nextlevelbuilder GoClaw 3.13.2 Command Execution Policy Bypass (CWE-184)06/11/202607/13/20263781270Duplicate
855805nextlevelbuilder GoClaw 3.13.3-beta.3 Path Traversal / Sandbox Escape (CWE-22)06/11/202607/13/202637812820Accepted
855804nextlevelbuilder GoClaw 3.11.3 Command Execution Policy Bypass (CWE-184)06/11/202607/13/202637812720Accepted
855798nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918)06/11/202607/13/202637812620Accepted
855797Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)06/11/202607/13/202637812520Accepted
855796mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59)06/11/202607/13/202637812420Accepted
855795mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)06/11/202607/13/202637812320Accepted
855793mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)06/11/202607/13/202637812220Accepted
855792mosaxiv clawlet 0.2.10 Protection Mechanism Failure (CWE-693)06/11/202607/13/202637812120Accepted
829407nextlevelbuilder GoClaw <= 3.11.3 Server-Side Request Forgery (SSRF) (CWE-918)05/14/202606/01/202636771020Accepted
829403HKUDS nanobot <= 0.1.5.post3 Missing Origin Validation in WebSockets (CWE-1385)05/14/202606/14/20263576500Duplicate
829402NousResearch hermes-agent <= v0.12.0 Authorization Bypass Through User-Controlled Key (CWE-639)05/14/202606/07/202636908120Accepted
829401Xxxxxxxxxxxx Xxxxxx-xxxxx <= Xxxxx.x.xx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxx (x05/14/202606/01/2026
 
0Rejected
821939nextlevelbuilder goclaw <= v3.11.3 OS Command Injection (CWE-78)05/07/202605/31/202636749820Accepted
821938nextlevelbuilder goclaw <= v3.11.3 Improper Authorization (CWE-285)05/07/202605/31/202636749720Accepted
821937nextlevelbuilder goclaw <= 3.11.3 Improper Privilege Management (CWE-269)05/07/202605/31/202636749620Accepted
821936unitedbyai droidclaw <= v0.5.3 Improper Restriction of Excessive Authentication Attempts (CWE-307)05/07/202605/31/202636749520Accepted
811276adenhq hive latest Path Traversal (CWE-22)04/23/202605/16/202636438420Accepted
811275Xxxxx-xx Xxxxx <= X.x.xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)04/23/202605/10/2026
 
0Rejected
811274aiwaves-cn agents latest Uncontrolled Resource Consumption (CWE-400)04/23/202605/11/202636260620Accepted
811273VectifyAI PageIndex latest Infinite Loop (CWE-835)04/23/202605/11/202636260520Accepted
811175fishaudio Bert-VITS2 <= 406b79a Path Traversal (CWE-22)04/23/202605/16/202636438320Accepted
811173fishaudio Bert-VITS2 latest (commit 724d0b2) Path Traversal (CWE-22)04/23/202605/16/202636438220Accepted
797646nextchat <= 2.16.1 Server-Side Request Forgery (CWE-918) / Path Traversal (CWE-22)04/06/202604/27/202635978020Accepted
797645nextchat <= 2.16.1 Server-Side Request Forgery / SSRF (CWE-918)04/06/202604/27/202635977920Accepted
797644coze-dev coze-studio <= 0.5.1 SQL Injection (CWE-89) / Improper Input Validation (CWE-20)04/06/202604/25/202635960220Accepted
797643smythos sre <= 0.0.15 Improper Authentication / Authorization Bypass (CWE-287 / CWE-6304/06/202604/25/202635960120Accepted
797642smythos sdk <= 0.0.15 Credential Exposure / Information Disclosure (CWE-200)04/06/202604/25/202635960020Accepted
797641pyspur-dev pyspur <= 0.1.18 Server-Side Template Injection (SSTI) (CWE-1336)04/06/202604/25/20263136380Duplicate
778273Xxxxxxx Xxxxx <= Xxxxxx Xxxxx-xxxx Xxxxxxxxx (xxx-xx)03/12/202603/27/2026
 
0Rejected
778272Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)03/12/202603/27/2026
 
0Rejected
778271Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)03/12/202603/27/2026
 
0Rejected
778270Sinaptik AI PandasAI >= 3.0.0 Code Injection (CWE-94)03/12/202603/27/202635388520Accepted
778269Sinaptik AI PandasAI <= 3.0.0 Path Traversal (CWE-22)03/12/202603/27/202635388420Accepted
778268Sinaptik AI PandasAI <= 0.1.4 SQL Injection (CWE-89)03/12/202603/27/202635388320Accepted
778267Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)03/12/202603/27/202635388220Accepted
778266Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Generation of Error Message Containing Sensitive Information (CWE-209)03/12/202603/27/202635388120Accepted
778265Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Use of Hard-coded Credentials (CWE-798)03/12/202603/27/202635388020Accepted
778264Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)03/12/202603/27/202635387920Accepted

Want to know what is going to be exploited?

We predict KEV entries!