Chia Min Jun Lennon

Crabbox < v0.12.0 Environment Variable Information Disclosure

Crabbox < v0.12.0 Privilege Escalation via Agent Ticket Endpoints

Crabbox < v0.12.0 Authentication Bypass via Header Spoofing

NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling

HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

AgentFlow Arbitrary Python Pipeline Execution via pipeline_path

AgentFlow Local Web API Content-Type Validation Bypass

radare2 < 6.1.4 Project Notes Path Traversal via Symlink

radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id