Eric-b

名称Eric-b
注册2026-03-11
社区积分620
提交0
提交40
帖子0
点赞0
排名专家
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

提交 (40)

时间轴 (40)

标识符标题提交管理条目积状态
855807nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-863)2026-06-112026-07-133781270重复
855806nextlevelbuilder GoClaw 3.13.2 Command Execution Policy Bypass (CWE-184)2026-06-112026-07-133781270重复
855805nextlevelbuilder GoClaw 3.13.3-beta.3 Path Traversal / Sandbox Escape (CWE-22)2026-06-112026-07-1337812820已接受
855804nextlevelbuilder GoClaw 3.11.3 Command Execution Policy Bypass (CWE-184)2026-06-112026-07-1337812720已接受
855798nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918)2026-06-112026-07-1337812620已接受
855797Poco AI poco-agent 0.5.4 Authorization Bypass Through User-Controlled Key (CWE-639)2026-06-112026-07-1337812520已接受
855796mosaxiv clawlet 0.2.10 Improper Link Resolution Before File Access (CWE-59)2026-06-112026-07-1337812420已接受
855795mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)2026-06-112026-07-1337812320已接受
855793mosaxiv clawlet 0.2.10 Server-Side Request Forgery (SSRF) (CWE-918)2026-06-112026-07-1337812220已接受
855792mosaxiv clawlet 0.2.10 Protection Mechanism Failure (CWE-693)2026-06-112026-07-1337812120已接受
829407nextlevelbuilder GoClaw <= 3.11.3 Server-Side Request Forgery (SSRF) (CWE-918)2026-05-142026-06-0136771020已接受
829403HKUDS nanobot <= 0.1.5.post3 Missing Origin Validation in WebSockets (CWE-1385)2026-05-142026-06-143576500重复
829402NousResearch hermes-agent <= v0.12.0 Authorization Bypass Through User-Controlled Key (CWE-639)2026-05-142026-06-0736908120已接受
829401Xxxxxxxxxxxx Xxxxxx-xxxxx <= Xxxxx.x.xx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxx (x2026-05-142026-06-01
 
0已拒绝
821939nextlevelbuilder goclaw <= v3.11.3 OS Command Injection (CWE-78)2026-05-072026-05-3136749820已接受
821938nextlevelbuilder goclaw <= v3.11.3 Improper Authorization (CWE-285)2026-05-072026-05-3136749720已接受
821937nextlevelbuilder goclaw <= 3.11.3 Improper Privilege Management (CWE-269)2026-05-072026-05-3136749620已接受
821936unitedbyai droidclaw <= v0.5.3 Improper Restriction of Excessive Authentication Attempts (CWE-307)2026-05-072026-05-3136749520已接受
811276adenhq hive latest Path Traversal (CWE-22)2026-04-232026-05-1636438420已接受
811275Xxxxx-xx Xxxxx <= X.x.xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx (xxxx) (xxx-xxx)2026-04-232026-05-10
 
0已拒绝
811274aiwaves-cn agents latest Uncontrolled Resource Consumption (CWE-400)2026-04-232026-05-1136260620已接受
811273VectifyAI PageIndex latest Infinite Loop (CWE-835)2026-04-232026-05-1136260520已接受
811175fishaudio Bert-VITS2 <= 406b79a Path Traversal (CWE-22)2026-04-232026-05-1636438320已接受
811173fishaudio Bert-VITS2 latest (commit 724d0b2) Path Traversal (CWE-22)2026-04-232026-05-1636438220已接受
797646nextchat <= 2.16.1 Server-Side Request Forgery (CWE-918) / Path Traversal (CWE-22)2026-04-062026-04-2735978020已接受
797645nextchat <= 2.16.1 Server-Side Request Forgery / SSRF (CWE-918)2026-04-062026-04-2735977920已接受
797644coze-dev coze-studio <= 0.5.1 SQL Injection (CWE-89) / Improper Input Validation (CWE-20)2026-04-062026-04-2535960220已接受
797643smythos sre <= 0.0.15 Improper Authentication / Authorization Bypass (CWE-287 / CWE-632026-04-062026-04-2535960120已接受
797642smythos sdk <= 0.0.15 Credential Exposure / Information Disclosure (CWE-200)2026-04-062026-04-2535960020已接受
797641pyspur-dev pyspur <= 0.1.18 Server-Side Template Injection (SSTI) (CWE-1336)2026-04-062026-04-253136380重复
778273Xxxxxxx Xxxxx <= Xxxxxx Xxxxx-xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0已拒绝
778272Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0已拒绝
778271Xxxxxxx Xxxxx <= Xxxxxx Xxxx Xxxxxxxxx (xxx-xx)2026-03-122026-03-27
 
0已拒绝
778270Sinaptik AI PandasAI >= 3.0.0 Code Injection (CWE-94)2026-03-122026-03-2735388520已接受
778269Sinaptik AI PandasAI <= 3.0.0 Path Traversal (CWE-22)2026-03-122026-03-2735388420已接受
778268Sinaptik AI PandasAI <= 0.1.4 SQL Injection (CWE-89)2026-03-122026-03-2735388320已接受
778267Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)2026-03-122026-03-2735388220已接受
778266Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Generation of Error Message Containing Sensitive Information (CWE-209)2026-03-122026-03-2735388120已接受
778265Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Use of Hard-coded Credentials (CWE-798)2026-03-122026-03-2735388020已接受
778264Weights and Biases OpenUI <= 1.0 (commit f9d8f0e) Cross-Site Scripting (CWE-79)2026-03-122026-03-2735387920已接受

Interested in the pricing of exploits?

See the underground prices here!