PParisNeo

Products

Exploited and recent CVEs

• CVE-2026-10595 High 7.5 Path Traversal Vulnerability in parisneo/lollms 0.6%
• CVE-2026-12228 High 8.7 Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms 0.3%
• CVE-2026-1116 High 8.2 Cross-site Scripting (XSS) in parisneo/lollms 0.3%
• CVE-2026-1115 Critical 9.6 Stored XSS in parisneo/lollms 1.3%
• CVE-2026-1163 Medium 4.1 Insufficient Session Expiration in parisneo/lollms 0.2%
• CVE-2026-1114 Critical 9.8 Improper Access Control via Weak JWT Token in parisneo/lollms 0.5%
• CVE-2026-0558 High 7.5 Unauthenticated File Upload in parisneo/lollms 2.0%
• CVE-2026-0560 High 7.5 Server-Side Request Forgery (SSRF) in parisneo/lollms 1.8%
• CVE-2026-0562 High 8.3 Insecure Direct Object Reference (IDOR) in parisneo/lollms 0.3%
• CVE-2026-33340 Critical 9.1 LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint 21.6%
• CVE-2024-2356 Critical 9.6 Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui 0.9%
• CVE-2026-1117 High 8.2 Improper Access Control in parisneo/lollms 0.6%
• CVE-2025-6386 High 7.5 Timing Attack Vulnerability in parisneo/lollms 0.4%
• CVE-2024-12766 High 7.5 SSRF in parisneo/lollms-webui 0.8%
• CVE-2024-8736 High 7.1 Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui 0.2%
• CVE-2024-8898 Medium 6.7 Path Traversal in parisneo/lollms-webui 0.8%
• CVE-2025-1451 High 7.5 Insufficient Patch Leading to DoS in parisneo/lollms-webui 0.6%
• CVE-2024-6986 Medium 5.5 Cross-site Scripting (XSS) in parisneo/lollms-webui 0.3%
• CVE-2024-6982 High 8.4 Remote Code Execution in Calculate Function in parisneo/lollms 0.5%
• CVE-2024-10019 Medium 6.3 Path Traversal and OS Command Injection in parisneo/lollms-webui 0.8%
• CVE-2024-9920 Medium 6.6 Unrestricted File Upload and Execution in parisneo/lollms-webui 1.4%
• CVE-2024-9919 High 8.4 Missing Authentication Check in parisneo/lollms-webui 0.3%
• CVE-2024-7058 Medium 4.4 Relative Path Traversal in parisneo/lollms-webui 0.3%
• CVE-2024-10047 Medium 5.3 Directory Listing Vulnerability in parisneo/lollms-webui 1.0%
• CVE-2024-9597 High 7.1 Path Traversal in parisneo/lollms 0.3%
• CVE-2024-8581 Critical 9.1 Path Traversal in parisneo/lollms-webui 1.0%
• CVE-2024-11302 High 8.0 Missing check_access in lollms_binding_infos in parisneo/lollms 0.2%
• CVE-2024-5125 High 7.3 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui 0.3%
• CVE-2024-6673 Medium 4.4 CSRF Vulnerability in parisneo/lollms-webui 0.2%
• CVE-2024-6581 Medium 6.5 Remote Code Execution due to Stored XSS in parisneo/lollms 0.7%