4 matches found
EUVD-2020-4207
Malware in sbrugna...
3.3CVSS3.9AI score0.00469EPSS
SaveExploits0References8
EUVD-2024-44113
Malicious code in bioql PyPI...
7.6CVSS7.7AI score0.00175EPSS
SaveExploits1References1
CVE-2024-4499
A Cross-Site Request Forgery CSRF vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax CORS policy. The vulnerability allows attackers to perform unauthorized actions by tricking a user into visiting a malicious webpage, which can then trigger arbitrary LoLLMS-XTTS...
6.3CVSS5.9AI score0.00175EPSS
SaveExploits1References1
PT-2024-31349 · Lollms +1 · Lollms +2
Name of the Vulnerable Software and Affected Versions: lollms version 9.6 Description: A Cross-Site Request Forgery CSRF vulnerability exists in the XTTS server due to a lax CORS policy, allowing attackers to perform unauthorized actions by tricking a user into visiting a malicious webpage. This...
7.6CVSS7.6AI score0.00175EPSS
SaveExploits1References4
20