Lucene search
+L

77 matches found

Kitploit
Kitploit
•added 2026/10/31 5:27 p.m.•93 views

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/31 8:53 a.m.•30 views

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

6.1AI score
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•16 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md: fixed the double-free of ioacctset bioset. Now, ioacctset is allocated and freed within a single operation in the personality context. The code that freed ioacctset during mdfree and mdstop has been removed...

7.8CVSS6.5AI score0.00275EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2026/08/19 9:39 a.m.•31 views

Your polite reply to that text is worth $2 on the dark web

Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you're willing to engage with strangers, making you a more valuable target for future fraud. Here's why a polite response can be worth...

5.4AI score
SaveExploits0
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•31 views

lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

A path traversal vulnerability in the /setpersonalityconfig endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the configs/config.yaml file. This can lead to remote code execution by changing server configuration properties such as forceacceptremoteaccess and...

7.4CVSS7.7AI score0.00448EPSS
SaveExploits0References6Affected Software1
osv_pysec
osv_pysec
•added 2026/07/07 2:34 p.m.•31 views

PYSEC-2026-1592 lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

A path traversal vulnerability in the /setpersonalityconfig endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the configs/config.yaml file. This can lead to remote code execution by changing server configuration properties such as forceacceptremoteaccess and...

7.4CVSS7.6AI score0.00448EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
•added 2026/05/23 12:00 a.m.•28 views

Routing Cybersecurity Awareness Training by FFM Personality Trait: A Quasi-Experimental Evaluation

Cybersecurity awareness training has historically adopted a one-size-fits-all approach, despite established individual differences in how users process and retain security information. Personality has been proposed as one axis along which training content might be tailored; yet no prior study has...

5.7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/11 12:00 a.m.•18 views

Belief in False Information: A Human-Centered Security Risk in Sociotechnical Systems

This paper provides a comprehensive literature review on the belief in false information, including misinformation, disinformation, and fake information. It addresses the increasing societal concern regarding false information, which is fueled by technological progress, especially advancements in...

6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 7:37 a.m.•21 views

CVE-2024-4328

A Cross-Site Request Forgery CSRF vulnerability exists in the clearpersonalityfileslist function of the parisneo/lollms-webui v9.6. The vulnerability arises from the use of a GET request to clear personality files list, which lacks proper CSRF protection. This flaw allows attackers to trick users...

8.1CVSS5.4AI score0.00184EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/22 1:18 p.m.•21 views

CVE-2024-7058

A vulnerability in the sanitizepath function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personalityfolder on the victim's computer...

4.4CVSS5.4AI score0.00331EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/03/20 10:49 a.m.•25 views

Relative Path Traversal

Overview lollms is a python library for AI personality definition Affected versions of this package are vulnerable to Relative Path Traversal in the sanitizepath function, which does not account for ./ sequences in pathnames. An attacker can bypass the sanitization to access the contents of...

5.1CVSS5.3AI score0.00355EPSS
SaveExploits2References2
NVD
NVD
•added 2025/03/20 10:15 a.m.•19 views

CVE-2024-7058

A vulnerability in the sanitizepath function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personalityfolder on the victim's computer...

4.4CVSS0.00331EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/20 10:15 a.m.•22 views

CVE-2024-7058

A vulnerability in the sanitizepath function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personalityfolder on the victim's computer...

4.4CVSS5.4AI score0.00331EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•9 views

PT-2025-12184

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui versions v10 through latest Description A vulnerability in the sanitize path function allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directorie...

4.4CVSS5.3AI score0.00331EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2025/02/27 3:07 a.m.•11 views

SUSE CVE-2022-49384

In the Linux kernel, the following vulnerability has been resolved: md: fix double free of ioacctset bioset Now ioacctset is alloc and free in personality. Remove the codes that free ioacctset in mdfree and mdstop...

5.5CVSS6.5AI score0.00275EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2025/02/26 7:01 a.m.•12 views

DEBIAN-CVE-2022-49384

In the Linux kernel, the following vulnerability has been resolved: md: fix double free of ioacctset bioset Now ioacctset is alloc and free in personality. Remove the codes that free ioacctset in mdfree and mdstop...

7.8CVSS6.8AI score0.00275EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/02/26 7:01 a.m.•18 views

UBUNTU-CVE-2022-49384

In the Linux kernel, the following vulnerability has been resolved: md: fix double free of ioacctset bioset Now ioacctset is alloc and free in personality. Remove the codes that free ioacctset in mdfree and mdstop...

7.8CVSS6.8AI score0.00275EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/02/26 2:11 a.m.•11 views

CVE-2022-49384 md: fix double free of io_acct_set bioset

In the Linux kernel, the following vulnerability has been resolved: md: fix double free of ioacctset bioset Now ioacctset is alloc and free in personality. Remove the codes that free ioacctset in mdfree and mdstop...

6.5AI score0.00275EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•7 views

PT-2025-8334

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-86.el9.x86 64 Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the raid0 personality of the md driver, where the mddev-private pointer is set to NULL after the pers-fr...

5.5CVSS5.8AI score0.00281EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•7 views

CVE-2022-49384: Double Free

In the Linux kernel, the following vulnerability has been resolved: md: fix double free of ioacctset bioset Now ioacctset is alloc and free in personality. Remove the codes that free ioacctset in mdfree and mdstop...

7.8CVSS6.6AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder