Lucene search
+L

31708 matches found

Mend
Mend
•added 2024/11/16 11:31 a.m.•1 views

MSC-2024-16505

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.7CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 3:15 p.m.•1 views

MSC-2024-16499

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2024/11/15 11:15 a.m.•43 views

CVE-2024-1240

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

6.1CVSS0.00328EPSS
SaveExploits1References2
OSV
OSV
•added 2024/11/15 11:15 a.m.•31 views

PYSEC-2024-123

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

6.1CVSS6.5AI score0.00328EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/11/15 10:57 a.m.•52 views

CVE-2024-1240 Open Redirection in pyload/pyload

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

4.6CVSS0.00328EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/11/15 10:57 a.m.•24 views

CVE-2024-1240 Open Redirection in pyload/pyload

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

4.6CVSS6.6AI score0.00328EPSS
SaveExploits1References2
OSV
OSV
•added 2024/11/15 10:57 a.m.•27 views

CVE-2024-1240 Open Redirection in pyload/pyload

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

4.6CVSS5.9AI score
SaveExploits0References4
Mend
Mend
•added 2024/11/15 10:57 a.m.•2 views

CVE-2024-1240

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

6.1CVSS0.00328EPSS
SaveExploits1References2
CVE
CVE
•added 2024/11/15 10:57 a.m.•102 views

CVE-2024-1240

The CVE-2024-1240 entry applies to pyload/pyload 0.5.0, where the login flow mishandles the next parameter, enabling an open redirect to attacker-controlled sites (phishing risk). The issue is mitigated by upgrading to pyload-ng 0.5.0b3.dev79 or later. Connected documents confirm the vulnerable c...

6.1CVSS5.7AI score0.00328EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/11/15 9:45 a.m.•1 views

MSC-2024-16498

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:45 a.m.•1 views

MSC-2024-16497

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:15 a.m.•1 views

MSC-2024-16496

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:04 a.m.•1 views

MSC-2024-16482

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:04 a.m.•1 views

MSC-2024-16484

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:04 a.m.•1 views

MSC-2024-16485

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:03 a.m.•1 views

MSC-2024-16490

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:03 a.m.•1 views

MSC-2024-16488

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 9:01 a.m.•1 views

MSC-2024-16495

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 8:59 a.m.•1 views

MSC-2024-16494

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/11/15 8:50 a.m.•1 views

MSC-2024-16491

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder