ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Informe de referencia: GHSA-pgpj-v85q-h5fm Este repositorio contiene una configuración de docker compose que configura tanto un servidor pyLoad como un servidor atacante que solo proporciona un csrf.html. Para probarlo usted mismo, simplemente ejecute docker composer up necesita...

CVE-2023-0297

pyloadCVE-2023-0297poc Una vulnerabilidad de inyección de código en versiones de pyLoad anteriores a 0.5.0b3.dev31 conduce a RCE sin autenticación al abusar de la funcionalidad de js2py. uso Uso de CVE-2023-0297poc.exe: -f string fileName:IP.txt -u string example:http://127.0.0.1:8080...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: RCE sin autenticación en pyLoad La historia de encontrar RCE sin autenticación en pyLoad TL;DR Una vulnerabilidad de inyección de código en versiones de pyLoad anteriores a 0.5.0b3.dev31 conduce a una RCE sin autenticación abusando de la funcionalidad de js2py. Puedes encontrar el...

CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE Pyload RCE con escape de sandbox js2py Resumen Cualquier pyload-ng ejecutándose bajo python3.11 o inferior es vulnerable a RCE. Un atacante puede enviar una solicitud que contenga cualquier comando de shell y el servidor víctima lo ejecutará inmediatamente. Solución...

pyload-ng js2py - Remote Code Execution

An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. id: CVE-2024-28397 info: name: pyload-ng js2py - Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: medium description: | An issue in the...

pyload - Log Injection

A log injection vulnerability was identified in pyload. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. id: CVE-2024-21645 info: name: pyload - Log Injection author: isacaya severity: medium description: | A log injection...

CVE-2023-0297

CVE-2023-0297 RCE en pyload anterior a 0.5.0b3.dev31. Exención de responsabilidad: Este script conduce a acceso no autorizado o control de un sistema remoto; úselo solo si tiene permiso explícito del propietario del sistema antes de proceder...

pyLoad Flask Config - Access Control

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. id: CVE-2024-21644 info: name: pyLoad Flask Config ...

CVE-2023-0297

CVE-2023-0297 Ejecución remota de código no autenticada en PyLoad 0.5.0b3.dev31 DESCARGO: Este script está hecho para auditar la seguridad de los sistemas. Úselo únicamente en sus propios sistemas o en sistemas donde tenga permiso por escrito para explotar...

CVE-2026-75597

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route /logs, /settings, /queue, /dashboard, etc...

CVE-2026-75597 pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route /logs, /settings, /queue, /dashboard, etc...

CVE-2026-75597

The pyLoad download manager is vulnerable to unauthenticated access to sensitive Jinja2 templates. Prior to version 0.5.0b3.dev101 , the /web/ route in src/pyload/webui/app/blueprints/app_blueprint.py fails to enforce authentication, bypassing the @login_required protection used on direct routes ...

EUVD-2026-95911

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement. Every equivalent direct route /logs, /settings, /queue, /dashboard, etc...

CVE-2026-48484

The pyLoad download manager is vulnerable to a Denial of Service (DoS) due to a lack of input size validation. Specifically, the rpc function in api_blueprint.py processes multipart/form-data uploads by using file.read() to load the entire file into memory before further processing. Because no si...

EUVD-2026-95910

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read. This occurs before the data is sent to the...

PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. id: CVE-2023-0297 info: name: PyLoad 0.5.0 - Pre-auth Remote Code Execution RCE author: MrHarshvardhan,DhiyaneshDk severity: critical description: | Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...

CVE-2026-48737

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, isglobaladdress in src/pyload/core/utils/web/check.py relies on Python's global-address classification without examining IPv4 destinations embedded in 6to4 or NAT64 IPv6 addresses. A low-privileged user...

CVE-2026-48987

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/eventmanager.py appends a Client object to the clients list for each unique uuid submitted to the authenticated getEvents API endpoint, but getevents does not...

CVE-2026-48987

pyLoad , a free and open-source Python download manager, is affected by unbounded memory growth in its EventManager module (src/pyload/core/managers/event_manager.py). Each unique UUID submitted to the authenticated getEvents API endpoint appends a Client object to an internal list, but the avail...