PT-2025-12297

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version V13 Description A missing authentication check in the uninstall endpoint allows attackers to perform unauthorized directory deletions. The "/uninstall/app name" API endpoint does not call the check access function...

Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A command injection vulnerability exists in the Siemens RUGGEDCOM ROX, which stems from a lack of server-side input validation, making the uninstall-ap...