7 matches found
EUVD-2025-6941
Malicious code in bioql PyPI...
CVE-2024-7058
CVE-2024-7058 affects parisneo/lollms-webui v10. The sanitize_path() function fails to neutralize './' relative paths, enabling path traversal to the personality_folder. Impact is local access to restricted directories. A PoC shows a category=./ probe; a fix was pushed to master but not yet relea...
CVE-2024-7058: Relative Path Traversal
A vulnerability in the sanitizepath function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personalityfolder on the victim's computer...
Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint
A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of the...
CVE-2024-6985
A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...
CVE-2024-6985
A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...
CVE-2024-6985: Relative Path Traversal
A path traversal vulnerability exists in the api openpersonalityfolder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personalityfolder on the victim's computer, even though sanitizepath is set. The issue arises due to improper sanitization of t...