https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 23:55:53 +0000 https://cve.radiocsirt.org/vuln/cve-2024-1522 <p><strong>Affected:</strong> parisneo/lollms-webui, parisneo lollms-webui</p> <p>A Cross-Site Request Forgery (CSRF) vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim&#39;s system. The vulnerability stems from the `/execute_code` API endpoint, which does not properly validate requests, enabling an attacker to craft a malicious webpage that, when visited by a victim, submits a form to the victim&#39;s local lollms-webui instance to execute arbitrary OS commands. This issue allows attackers to take full control of the victim&#39;s system without requiring direct network access to the vulnerable application.</p> <p><strong>Affected:</strong> parisneo/lollms-webui, parisneo lollms-webui</p> <p>A Cross-Site Request Forgery (CSRF) vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim&#39;s system. The vulnerability stems from the `/execute_code` API endpoint, which does not properly validate requests, enabling an attacker to craft a malicious webpage that, when visited by a victim, submits a form to the victim&#39;s local lollms-webui instance to execute arbitrary OS commands. This issue allows attackers to take full control of the victim&#39;s system without requiring direct network access to the vulnerable application.</p> https://cve.radiocsirt.org/vuln/cve-2024-1522