Pyload

Pyload

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2025-61773

  • EPSS 0.07%
  • Veröffentlicht 09.10.2025 20:49:53
  • Zuletzt bearbeitet 14.10.2025 19:37:28

pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load (CNL) Blueprint. This flaw ...

7.7

CVE-2025-57751

  • EPSS 0.07%
  • Veröffentlicht 21.08.2025 18:27:04
  • Zuletzt bearbeitet 22.08.2025 18:08:51

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of jk parameter verification, the jk parameter input by the user is directly determined as dykpy.evaljs(...

7.8

CVE-2025-55156

  • EPSS 0.03%
  • Veröffentlicht 11.08.2025 22:21:52
  • Zuletzt bearbeitet 12.08.2025 14:25:33

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the parameter add_links in API /json/add_package is vulnerable to SQL Injection. Attackers can modify or delete data in the database, causing ...

9.8

CVE-2025-54802

Exploit
  • EPSS 0.81%
  • Veröffentlicht 05.08.2025 00:06:48
  • Zuletzt bearbeitet 09.10.2025 17:32:39

pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there is an opportunity for path traversal in pyLoad-ng CNL Blueprint via package parameter, allowing Arbitrary File Write which leads to...

7.5

CVE-2025-54140

  • EPSS 0.4%
  • Veröffentlicht 22.07.2025 21:34:30
  • Zuletzt bearbeitet 25.07.2025 15:29:44

pyLoad is a free and open-source Download Manager written in pure Python. In version 0.5.0b3.dev89, an authenticated path traversal vulnerability exists in the /json/upload endpoint of pyLoad. By manipulating the filename of an uploaded file, an atta...

9.8

CVE-2025-53890

  • EPSS 0.58%
  • Veröffentlicht 15.07.2025 00:15:24
  • Zuletzt bearbeitet 15.07.2025 20:15:51

pyload is an open-source Download Manager written in pure Python. An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allows unauthenticated remote attackers to execute arbitrary code in the client browser and potentiall...

8.7

CVE-2025-7346

  • EPSS 0.25%
  • Veröffentlicht 08.07.2025 07:05:11
  • Zuletzt bearbeitet 08.07.2025 16:18:14

Any unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages

6.1

CVE-2024-1240

Exploit
  • EPSS 0.23%
  • Veröffentlicht 15.11.2024 11:15:10
  • Zuletzt bearbeitet 19.11.2024 19:04:53

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites...

2.3

CVE-2024-47821

Exploit
  • EPSS 2.57%
  • Veröffentlicht 25.10.2024 23:15:02
  • Zuletzt bearbeitet 05.03.2025 14:53:25

pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing th...

7.2

CVE-2024-32880

Exploit
  • EPSS 3.98%
  • Veröffentlicht 26.04.2024 18:15:45
  • Zuletzt bearbeitet 04.09.2025 14:23:51

pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publi...