ybdesire

名称ybdesire
注册2025-03-25
社区积分669
提交17
提交42
帖子0
点赞0
排名专家
Activity Badges
👴 Long-time User
🔁 Returning User
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (13x)
👋 Regular Visitor
📤 Submitter (6x)
📝 Editor

提交 (42)

时间轴 (42)

标识符标题提交管理条目积状态
826222Enderfga claw-orchestrator v2.7.0-v3.7.0 Inefficient Regular Expression Complexity2026-05-122026-05-3136758420已接受
825429Enderfga claw-orchestrator v2.7.1-v3.5.5 Missing Authentication2026-05-112026-05-3136757420已接受
824924lharries whatsapp-mcp v0.0.1 Path Traversal2026-05-102026-05-3136754420已接受
815713haojing8312 WorkClaw v0.1.0 - v0.6.3 Incomplete Blacklist2026-04-292026-05-2636562720已接受
813768FoundDream miniclawd 0 Command Injection2026-04-272026-05-2436543420已接受
813767FoundDream miniclawd 0 OS Command Injection2026-04-272026-05-2436543320已接受
8090018421bit MiniClaw 0 OS Command Injection2026-04-212026-05-0936245520已接受
8081678421bit MiniClaw 0 Path Traversal2026-04-202026-05-0736190120已接受
8081668421bit MiniClaw 0 OS Command Injection2026-04-202026-05-0736190020已接受
791911Zod- jsVideoUrlParser 0.1.3 to 0.5.1 Inefficient Regular Expression Complexity2026-03-282026-04-0935654020已接受
774685pygments <=2.19.2 Denial of Service2026-03-072026-03-2135232720已接受
773852Xxxxxxxx <=x.xx.x Xxxxxx Xx Xxxxxxx2026-03-062026-03-07
 
0已拒绝
601029coldfunction qCUDA 0.0 Integer Overflow2025-06-202025-06-2531382018已接受
597382HobbesOSR kitten 0.0 Resource Consumption2025-06-162025-06-1931335820已接受
590528letta-ai letta >=v0.4.1 Code Injection2025-06-052025-06-1531257020已接受
588106uYanki board-stm32f103rc-berial 0.0 Buffer Overflow2025-05-312025-06-1531256220已接受
584858Xxxxxxxxxxxxx X-xxxx Xxxxx.xx-xxx Xx Xxxxx.xx-xxx Xxxxxxx Xxxxxxxx2025-05-262025-05-27
 
0已拒绝
578126HumanSignal label-studio-ml-backend 0.0 Deserialization2025-05-152025-05-2531026120已接受
574809defog-ai introspect v0.1.0 to v0.1.4 Code Injection2025-05-102025-05-2431023920已接受
573800FunAudioLLM InspireMusic 0.0 Deserialization2025-05-082025-05-2431023620已接受
571363defog-ai introspect v0.1.0 to v0.1.4 Code Injection2025-05-052025-05-1530906820已接受
570923XU-YIJIE grpo-flat 0.0 Deserialization2025-05-042025-05-1530904220已接受
567796VITA-MLLM Freeze-Omni 0.0 Deserialization2025-04-302025-05-1530899920已接受
562942GAIR-NLP factool 0.0 Code Injection2025-04-212025-05-0430736520已接受
562617handrew browserpilot 0.0 Code Injection2025-04-202025-05-033071950重复
562383handrew browserpilot 0.0 Code Injection2025-04-192025-05-0230719520已接受
559222inclusionAI AWorld 0.0 Command Injection2025-04-162025-04-2830639520已接受
558415web-arena-x webarena <=0.2.0 Code Injection2025-04-152025-04-2730637620已接受
555946Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx2025-04-102025-04-21
 
0已拒绝
555944Xxxxx Xxxxxxxx X.x.x Xx X.x.x Xxxxxxx Xxxxxxxxx2025-04-102025-04-21
 
0已拒绝
555933Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0已拒绝
555932Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0已拒绝
555919Xxxxxxxxx Xxxxxxx X.x Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxx2025-04-102025-04-19
 
0已拒绝
555905wix-incubator jam 0.0 Improper Neutralization of Special Elements Used in a Template E2025-04-102025-04-2130576920已接受
554781sarrionandia tournatrack 0.0 Improper Neutralization of Special Elements Used in a Template E2025-04-092025-04-1830565920已接受
554779thautwarm vscode-diana 0.0.1 Improper Neutralization of Special Elements Used in a Template E2025-04-092025-04-1830565820已接受
552755lm-sys FastChat v0.2.3 to v0.2.36 Deserialization2025-04-072025-04-1630496620已接受
552245xorbitsai inference 0.15.0 to 1.4.1 Deserialization2025-04-062025-04-1530467920已接受
552231Xxxxxxx <x.x.x Xxxx Xxxxxxxxx2025-04-062025-04-07
 
0已拒绝
542529thu-pacman chitu <0.1.0 Deserialization2025-03-252025-04-0330311120已接受
542527InternLM lmdeploy <=0.7.1 Code Injection2025-03-252025-04-0330310917已接受
542520InternLM lmdeploy <=0.7.1 Deserialization2025-03-252025-04-0330310817已接受

提交 (17)

时间轴 (17)

标识符条目CVE已更新管理更积
20686235HumanSignal label-studio-ml-backend PT neural_nets.py load 权限提升CVE-2025-51732025-05-272025-05-2711
20686223defog-ai introspect analysis_tools.py execute_analysis_code_safely 权限提升CVE-2025-51512025-05-272025-05-2711
20686222FunAudioLLM InspireMusic Pickle Data model.py load_state_dict 权限提升CVE-2025-51482025-05-272025-05-2711
20686218defog-ai introspect Test integration_routes.py test_custom_tool 权限提升CVE-2025-47672025-05-272025-05-2711
20686217XU-YIJIE grpo-flat grpo_vanilla.py main 权限提升CVE-2025-47422025-05-272025-05-2711
20686216VITA-MLLM Freeze-Omni utils.py torch.load 权限提升CVE-2025-47012025-05-272025-05-2711
20413547GAIR-NLP factool tool.py run_single 权限提升CVE-2025-42612025-05-052025-05-0511
20348681web-arena-x webarena evaluators.py HTMLContentEvaluator 权限提升CVE-2025-40222025-04-302025-04-3011
20348680inclusionAI AWorld shell_tool.py subprocess.Popen 权限提升CVE-2025-40322025-04-302025-04-3011
20297878wix-incubator jam Jinja2 Template jam.pyCVE-2025-38412025-04-242025-04-2411
20267006sarrionandia tournatrack Jinja2 Template check_id.py 权限提升CVE-2025-38052025-04-212025-04-2111
20267005thautwarm vscode-diana Jinja2 Template Gen.py 权限提升CVE-2025-38042025-04-212025-04-2111
20267004lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem 权限提升CVE-2025-36772025-04-212025-04-2111
20267003Xorbits Inference model.py load 权限提升CVE-2025-36222025-04-212025-04-2111
20267002thu-pacman chitu backend.py torch.load 权限提升CVE-2025-31652025-04-212025-04-2111
20267001InternLM LMDeploy conf.py open 权限提升CVE-2025-31632025-04-212025-04-2111
20267000InternLM LMDeploy PT utils.py load_weight_ckpt 权限提升CVE-2025-31622025-04-212025-04-2111

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!