EUVD-2023-0587

Malicious code in bioql PyPI...

EUVD-2024-3149

Malicious code in bioql PyPI...

EUVD-2023-0572

Malicious code in bioql PyPI...

EUVD-2023-2971

Malicious code in bioql PyPI...

EUVD-2023-0548

Malicious code in bioql PyPI...

EUVD-2025-21406

Malicious code in bioql PyPI...

EUVD-2023-0485

Malicious code in bioql PyPI...

EUVD-2025-29437

Malicious code in bioql PyPI...

EUVD-2023-0416

Malicious code in bioql PyPI...

EUVD-2024-0154

Malicious code in bioql PyPI...

EUVD-2025-23574

Malicious code in bioql PyPI...

EUVD-2024-0155

Malicious code in bioql PyPI...

pyLoad < 0.5.0b3.dev76 Improper Access Control

pyLoad version prior to 0.5.0b3.dev76 is affected by an Improper Access Control vulnerability. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. An attacker can leverage this vulnerability to perform further attacks against the...

pyLoad Default Credentials

pyLoad is an open-source download manager written in Python. By default, pyLoad is configured with a default username and password allowing any attacker to log in to the application and have full access to its functionality. An attacker can leverage this vulnerability to perform further attacks...

Exploit for CVE-2024-28397

🚨 Remote Code Execution – CVE-2024-28397 pyload-ng / js2py...

CVE-2025-57751

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of jk parameter verification, the jk parameter input by the user is directly determined as dykpy.evaljs, resulting in the server CPU being fully occupi...

GHSA-9GJJ-6GJ7-C4WJ Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

Dear Maintainers, I am writing to you on behalf of the Tencent AI Sec. We have identified a potential vulnerability in one of your products and would like to report it to you for further investigation and mitigation. Summary The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of...

Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

Dear Maintainers, I am writing to you on behalf of the Tencent AI Sec. We have identified a potential vulnerability in one of your products and would like to report it to you for further investigation and mitigation. Summary The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of...

CVE-2025-57751

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of jk parameter verification, the jk parameter input by the user is directly determined as dykpy.evaljs, resulting in the server CPU being fully occupi...

Allocation of Resources Without Limits or Throttling

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the jk parameter in the CNL Blueprint process. An attacker can cause the server CPU to become fully...