84 matches found
Improper Input Validation in pyload-ng
Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...
7.5CVSS7.3AI score0.00816EPSS
SaveExploits1References4Affected Software1
GHSA-PF38-5P22-X6H6 Code Injection in pyload-ng
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
9.8CVSS9.6AI score0.95915EPSS
SaveExploits13References5
Code Injection in pyload-ng
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
9.8CVSS9.4AI score0.95915EPSS
SaveExploits13References6Affected Software1
Clickjacking
pyload-ng is vulnerable to clickjacking attacks. The vulnerability exists due to the lack of frame restrictions in init.py as it does not properly set the response header X-Frame-Options: DENY, which allows an attacker to load the website within a malicious response header...
6.1CVSS6AI score0.00456EPSS
SaveExploits0References4Affected Software1
20