EUVD-2024-2301

Malicious code in bioql PyPI...

CVE-2024-6281 Path Traversal in parisneo/lollms

A path traversal vulnerability exists in the applysettings function of parisneo/lollms versions prior to 9.5.1. The sanitizepath function does not adequately secure the discussiondbname parameter, allowing attackers to manipulate the path and potentially write to important system folders...

PT-2024-31343

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui versions v9.7 through the latest Description A Path Traversal and Remote File Inclusion RFI issue exists due to insufficient input validation in the /apply settings function, allowing an attacker to manipulate the...