Eric-a (VulDB User)

netease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery

cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following

cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization

cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery

HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection

cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure

HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist

zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection