EUVD-2024-27497

Malicious code in bioql PyPI...

EUVD-2024-0096

Malicious code in bioql PyPI...

EUVD-2024-32022

Malicious code in bioql PyPI...

EUVD-2024-2008

Malicious code in bioql PyPI...

EUVD-2024-47198

Malicious code in bioql PyPI...

EUVD-2024-27311

Malicious code in bioql PyPI...

EUVD-2024-0095

Malicious code in bioql PyPI...

EUVD-2025-6890

Malicious code in bioql PyPI...

EUVD-2025-6855

Malicious code in bioql PyPI...

EUVD-2025-6977

Malicious code in bioql PyPI...

EUVD-2024-17341

Malicious code in bioql PyPI...

EUVD-2024-47062

Malicious code in bioql PyPI...

EUVD-2024-47724

Malicious code in bioql PyPI...

Exploit for Code Injection in Lollms

CVE-2024-3121 - Remote Code Execution RCE in parisneo/lollm...

Information Exposure

Overview lollms is a python library for AI personality definition Affected versions of this package are vulnerable to Information Exposure via the authenticateuser function in the /server/endpoints/lollmsauthentication.py file. An attacker can enumerate valid usernames and incrementally guess...

CVE-2025-6386 Timing Attack Vulnerability in parisneo/lollms

The parisneo/lollms repository is affected by a timing attack vulnerability in the authenticateuser function within the lollmsauthentication.py file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The...

CVE-2025-6386 Timing Attack Vulnerability in parisneo/lollms

The parisneo/lollms repository is affected by a timing attack vulnerability in the authenticateuser function within the lollmsauthentication.py file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The...

LoLLMs 安全漏洞

LoLLMs is a large language and multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from a risk of a timing difference attack in the authenticateuser function in lollmsauthentication.py, which could lead to username enumeration and...

CVE-2025-6386: Observable Discrepancy

The parisneo/lollms repository is affected by a timing attack vulnerability in the authenticateuser function within the lollmsauthentication.py file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The...

CVE-2024-6971

A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the lollmsfilesystem.py file. The functions addragdatabase, togglemountragdatabase, and vectorizefolder do not implement security measures such as sanitizepathfromendpoint or sanitizepath. This allows a...