Chia Min Jun Lennon

Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui Arbitrary Workspace Directory Access

HKUDS OpenHarness Insecure Default Remote Channel Allowlist

HKUDS OpenHarness Plugin Management Command Exposure

HKUDS OpenHarness Session Key Collision Privilege Escalation

Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Vibe-Trading < 0.1.10 - Path Traversal via Persistent Memory Type

Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier

Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates

Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution