LoLLMs 路径遍历漏洞

LoLLMs is a Web UI for a large language multimodal system by Saifeddine ALOUI Personal Developer. A path traversal vulnerability exists in LoLLMs version 9.6, which stems from the listpersonalities endpoint mishandling user-supplied input, and can be exploited by an attacker to traverse the...

LoLLMs 命令注入漏洞

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A command injection vulnerability exists in LoLLMs that stems from the openfile function not neutralizing special elements used in user uploaded commands...

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from insufficient cleanup of user-supplied input in configuration settings, allowing an attacker to execute arbitrary code...

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs versions prior to 9.3, which stems from insufficient protection of the /applysettings and /executecode endpoints, allowing remote attackers to execute...

LoLLMs Operating System Command Injection Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. An operating system command injection vulnerability exists in LoLLMs versions prior to 9.5 that stems from incorrect neutralization of special elements used in operating system commands, allowi...

LoLLMs 跨站脚本漏洞

LoLLMs is a web UI for large language multimodal systems by Saifeddine ALOUI individual developer. LoLLMs suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload...