Unverified50% confidenceOpinionExact time
Beginners commonly make three types of mistakes in SRC bug hunting: weak authorization awareness that treats oral requests as authorization, public disclosure before a vulnerability is fixed, and skipping labs to go straight into live testing.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在某工作流中专门的审查Agent捕捉到了主Agent遗漏的多个错误65% similarUnverifiedA file upload function in the back-end combined with a weak password often constitutes a Critical-level vulnerability in the SRC rating system.65% similarUnverifiedErrors caused by the phase sensitivity problem do not raise errors, are invisible and are hard to reproduce, so users may encounter silent loss of key information in long-context tasks such as contract review, code analysis and legal retrieval.64% similarUnverifiedThe false positive rate of mature commercial vulnerability scanners often fluctuates between 30% and 70%, AI agents in complex scenarios may have an even higher misjudgment rate, and SRC platforms have penalty mechanisms for accounts that frequently submit invalid reports.62% similarUnverifiedA common mistake beginners make is catching too broadly, directly using except: to swallow all errors; it is recommended to explicitly catch specific exception types and log them.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1093917API
curl https://kongchang.com/api/v1/knowledge/claims/1093917MCP
get_claim(id=1093917)