CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE Pyload RCE with js2py sandbox escape Summary Any pyload-ng running under python3.11 or below are vulnerable under RCE. Attacker can send a request containing any shell command and the victim server will execute it immediately. Fix Upgrade to the newest version of pyload-...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Reference report: GHSA-pgpj-v85q-h5fm This repository contains a docker compose configuration that setups both a pyLoad server and an attacker server that just provides a csrf.html. To test yourself, just run docker composer up you need to have docker composer installed additionall...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: Pre-auth RCE in pyLoad The Story of Finding Pre-auth RCE in pyLoad TL;DR A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. You can find the report here and exploit code here. Details pyLoad is an OSS...

pyLoad Flask Config - Access Control

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. id: CVE-2024-21644 info: name: pyLoad Flask Config ...

pyload - Log Injection

A log injection vulnerability was identified in pyload. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. id: CVE-2024-21645 info: name: pyload - Log Injection author: isacaya severity: medium description: | A log injection...

PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. id: CVE-2023-0297 info: name: PyLoad 0.5.0 - Pre-auth Remote Code Execution RCE author: MrHarshvardhan,DhiyaneshDk severity: critical description: | Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

pyload-ng js2py - Remote Code Execution

An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. id: CVE-2024-28397 info: name: pyload-ng js2py - Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: medium description: | An issue in the...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...

CVE-2023-0297

CVE-2023-0297 RCE in pyload prior to 0.5.0b3.dev31. Disclaimer: This script lead to unauthorized access or control of a remote system; only use it if you have explicit permission from the system owner before proceeding...

CVE-2023-0297

pyloadCVE-2023-0297poc A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. use Usage of CVE-2023-0297poc.exe: -f string fileName:IP.txt -u string example:http://127.0.0.1:8080...

CVE-2023-0297

CVE-2023-0297 Unauthenticated Remote Code Execution in PyLoad 0.5.0b3.dev31 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...

CVE-2026-123816

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.checkapikey caches successful validation in self.apikeycache using only the attacker-controlled keyid. After a legitimate key populates the cache, a forged API key with the same keyid reaches the...

CVE-2026-123813

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, pyLoad does not invalidate existing Flask sessions when an administrator changes a user's permissions or password through /api/setuserpermission or /api/changepassword. Api.setuserpermission and...

CVE-2026-123815

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, UnTar.safeextractall in src/pyload/plugins/extractors/UnTar.py validates archive member paths and link targets but does not call TarInfo.isdev to reject special tar member types before calling...

CVE-2026-123814

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, an authenticated non-admin user with the SETTINGS permission can configure WindowsPhoneNotify through /json/saveconfig by setting pushurl, pushid, and enabled. WindowsPhoneNotify.send in...

CVE-2026-123816 pyLoad: Authentication bypass in API key validation (check_apikey cache)

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.checkapikey caches successful validation in self.apikeycache using only the attacker-controlled keyid. After a legitimate key populates the cache, a forged API key with the same keyid reaches the...

CVE-2026-123816 pyLoad: Authentication bypass in API key validation (check_apikey cache)

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.checkapikey caches successful validation in self.apikeycache using only the attacker-controlled keyid. After a legitimate key populates the cache, a forged API key with the same keyid reaches the...

CVE-2026-123816 pyLoad: Authentication bypass in API key validation (check_apikey cache)

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.checkapikey caches successful validation in self.apikeycache using only the attacker-controlled keyid. After a legitimate key populates the cache, a forged API key with the same keyid reaches the...

CVE-2026-123816

The open-source download manager pyLoad contains a critical authentication bypass in its API key validation mechanism (versions prior to 0.5.0b3.dev101 ). The root cause is that the Api.check_apikey() function caches successful validations in self._apikey_cache using only the key_id, which is a s...

EUVD-2026-120452

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.checkapikey caches successful validation in self.apikeycache using only the attacker-controlled keyid. After a legitimate key populates the cache, a forged API key with the same keyid reaches the...