https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:36:38.910886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-190411 EUVD-2026-190411 2026-10-06T23:36:38.959353+00:00 EUVD-2026-190411 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6394 fkie_cve-2024-6394 2026-10-06T23:36:38.959389+00:00

A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the `serve_js` function in `app.py`, which allows attackers to perform path traversal attacks. This can lead to unauthorized access to arbitrary files on the server, potentially exposing sensitive information such as private SSH keys, configuration files, and source code.

 https://cve.radiocsirt.org/vuln/ghsa-g8rf-47g8-m3m9 GHSA-g8rf-47g8-m3m9 2026-10-06T23:36:38.959423+00:00

A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the `serve_js` function in `app.py`, which allows attackers to perform path traversal attacks. This can lead to unauthorized access to arbitrary files on the server, potentially exposing sensitive information such as private SSH keys, configuration files, and source code.