https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:39:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01323 bdu:2025-01323 https://cve.radiocsirt.org/vuln/bdu:2025-01323 https://cve.radiocsirt.org/vuln/euvd-2026-224095 EUVD-2026-224095 https://cve.radiocsirt.org/vuln/euvd-2026-224095 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11302 <p>A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /install_binding and /reinstall_binding endpoints, among others, enabling unauthorized access and manipulation of binding settings without requiring the client_id value.</p> <p>A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /install_binding and /reinstall_binding endpoints, among others, enabling unauthorized access and manipulation of binding settings without requiring the client_id value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11302 https://cve.radiocsirt.org/vuln/ghsa-3j5r-3852-j63v <p>A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /install_binding and /reinstall_binding endpoints, among others, enabling unauthorized access and manipulation of binding settings without requiring the client_id value.</p> <p>A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /install_binding and /reinstall_binding endpoints, among others, enabling unauthorized access and manipulation of binding settings without requiring the client_id value.</p> https://cve.radiocsirt.org/vuln/ghsa-3j5r-3852-j63v