Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-6941

Malicious code in bioql PyPI...

4.4CVSS5AI score0.00325EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/20 10:09 a.m.•67 views

CVE-2024-7058

CVE-2024-7058 affects parisneo/lollms-webui v10. The sanitize_path() function fails to neutralize './' relative paths, enabling path traversal to the personality_folder. Impact is local access to restricted directories. A PoC shows a category=./ probe; a fix was pushed to master but not yet relea...

4.4CVSS5.6AI score0.00325EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•3 views

CVE-2024-7058: Relative Path Traversal

A vulnerability in the sanitizepath function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personalityfolder on the victim's computer...

4.4CVSS5.6AI score0.00325EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/10/11 6:32 p.m.•56 views

Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint

A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of the...

4.4CVSS6.7AI score0.00355EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2024/10/11 4:15 p.m.•41 views

CVE-2024-6985

A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...

4.4CVSS0.00355EPSS
SaveExploits1References2
Mend
Mend
•added 2024/10/11 3:38 p.m.•2 views

CVE-2024-6985

A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...

6.7CVSS0.00355EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/11 12:00 a.m.•6 views

CVE-2024-6985: Relative Path Traversal

A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...

4.4CVSS5.7AI score0.00355EPSS
SaveExploits1References1
Rows per page
Query Builder