kidocode kayıtları
kidocode üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %94,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2026-53753Kavram kanıtı | Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIkidocode · crawl4ai · CWE-94 | Kritik10,0 | — | %2,9 | 23 Haz 2026 |
40Planlayın | CVE-2026-26216Kavram kanıtı | Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameterkidocode · crawl4ai · CWE-94 | Kritik10,0 | — | %1,7 | 12 Şub 2026 |
40Planlayın | CVE-2026-57572İstismar yok | Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argskidocode · crawl4ai · CWE-88 | Kritik10,0 | — | %0,9 | 6 Tem 2026 |
38İzleyin | CVE-2026-56265Kavram kanıtı | Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Keykidocode · crawl4ai · CWE-798 | Kritik9,3 | — | %2,6 | 21 Haz 2026 |
38İzleyin | CVE-2026-57571İstismar yok | Crawl4AI arbitrary file write via download filename path traversalkidocode · crawl4ai · CWE-22 | Kritik9,6 | — | %0,8 | 6 Tem 2026 |
37İzleyin | CVE-2026-26217Kavram kanıtı | Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handlingkidocode · crawl4ai · CWE-22 | Kritik9,2 | — | %2,0 | 12 Şub 2026 |
36İzleyin | CVE-2026-56258İstismar yok | Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOUkidocode · crawl4ai · CWE-22 | Kritik9,2 | — | %0,9 | 23 Haz 2026 |
36İzleyin | CVE-2026-56261İstismar yok | Crawl4AI - Server-Side Request Forgery via Webhook URLskidocode · crawl4ai · CWE-918 | Kritik9,2 | — | %0,5 | 10 Tem 2026 |
36İzleyin | CVE-2026-56264İstismar yok | Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpointkidocode · crawl4ai · CWE-94 | Kritik9,2 | — | %0,5 | 30 Haz 2026 |
36İzleyin | CVE-2026-56266İstismar yok | Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpointskidocode · crawl4ai · CWE-918 | Kritik9,2 | — | %0,5 | 22 Haz 2026 |
36İzleyin | CVE-2025-28197İstismar yok | Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.kidocode · crawl4ai · CWE-918 | Kritik9,1 | — | %0,4 | 18 Nis 2025 |
35İzleyin | CVE-2026-56260İstismar yok | Crawl4AI - Arbitrary File Write via output_path Parameterkidocode · crawl4ai · CWE-22 | Yüksek8,8 | — | %0,6 | 12 Tem 2026 |
35İzleyin | CVE-2026-56259İstismar yok | Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolutionkidocode · crawl4ai · CWE-200 | Yüksek8,8 | — | %0,4 | 12 Tem 2026 |
34İzleyin | CVE-2026-57573İstismar yok | Crawl4AI unauthenticated SSRF in Docker streaming crawl endpointkidocode · crawl4ai · CWE-918 | Yüksek8,6 | — | %0,4 | 6 Tem 2026 |
30İzleyin | CVE-2026-53755Kavram kanıtı | Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkkidocode · crawl4ai · CWE-918 | Yüksek7,5 | — | %1,6 | 23 Haz 2026 |
30İzleyin | CVE-2026-53754İstismar yok | Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)kidocode · crawl4ai · CWE-918 | Yüksek7,5 | — | %0,4 | 23 Haz 2026 |
27İzleyin | CVE-2026-56262İstismar yok | Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Serverkidocode · crawl4ai · CWE-306 | Orta6,9 | — | %0,8 | 24 Haz 2026 |
21İzleyin | CVE-2026-56263İstismar yok | Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboardkidocode · crawl4ai · CWE-79 | Orta5,3 | — | %0,3 | 23 Haz 2026 |
- CVE-2026-5375341Planlayın
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
KritikCVSS 10,0Kavram kanıtıEPSS %3kidocode · crawl4ai23 Haz 2026
- CVE-2026-2621640Planlayın
Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
KritikCVSS 10,0Kavram kanıtıEPSS %2kidocode · crawl4ai12 Şub 2026
- CVE-2026-5757240Planlayın
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
KritikCVSS 10,0İstismar yokEPSS %1kidocode · crawl4ai6 Tem 2026
- CVE-2026-5626538İzleyin
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
KritikCVSS 9,3Kavram kanıtıEPSS %3kidocode · crawl4ai21 Haz 2026
- CVE-2026-5757138İzleyin
Crawl4AI arbitrary file write via download filename path traversal
KritikCVSS 9,6İstismar yokEPSS %1kidocode · crawl4ai6 Tem 2026
- CVE-2026-2621737İzleyin
Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling
KritikCVSS 9,2Kavram kanıtıEPSS %2kidocode · crawl4ai12 Şub 2026
- CVE-2026-5625836İzleyin
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
KritikCVSS 9,2İstismar yokEPSS %1kidocode · crawl4ai23 Haz 2026
- CVE-2026-5626136İzleyin
Crawl4AI - Server-Side Request Forgery via Webhook URLs
KritikCVSS 9,2İstismar yokEPSS %1kidocode · crawl4ai10 Tem 2026
- CVE-2026-5626436İzleyin
Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint
KritikCVSS 9,2İstismar yokEPSS %0kidocode · crawl4ai30 Haz 2026
- CVE-2026-5626636İzleyin
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
KritikCVSS 9,2İstismar yokEPSS %0kidocode · crawl4ai22 Haz 2026
- CVE-2025-2819736İzleyin
Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.
KritikCVSS 9,1İstismar yokEPSS %0kidocode · crawl4ai18 Nis 2025
- CVE-2026-5626035İzleyin
Crawl4AI - Arbitrary File Write via output_path Parameter
YüksekCVSS 8,8İstismar yokEPSS %1kidocode · crawl4ai12 Tem 2026
- CVE-2026-5625935İzleyin
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
YüksekCVSS 8,8İstismar yokEPSS %0kidocode · crawl4ai12 Tem 2026
- CVE-2026-5757334İzleyin
Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint
YüksekCVSS 8,6İstismar yokEPSS %0kidocode · crawl4ai6 Tem 2026
- CVE-2026-5375530İzleyin
Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
YüksekCVSS 7,5Kavram kanıtıEPSS %2kidocode · crawl4ai23 Haz 2026
- CVE-2026-5375430İzleyin
Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
YüksekCVSS 7,5İstismar yokEPSS %0kidocode · crawl4ai23 Haz 2026
- CVE-2026-5626227İzleyin
Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server
OrtaCVSS 6,9İstismar yokEPSS %1kidocode · crawl4ai24 Haz 2026
- CVE-2026-5626321İzleyin
Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard
OrtaCVSS 5,3İstismar yokEPSS %0kidocode · crawl4ai23 Haz 2026