Lucene search
+L

574 matches found

Positive Technologies
Positive Technologies
added 2023/01/22 12:0 a.m.6 views

PT-2023-16266

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev40 Description The issue is related to improper input validation. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

7.5CVSS6.5AI score0.00816EPSS
SaveExploits1References11
CVE
CVE
added 2023/01/22 12:0 a.m.92 views

CVE-2023-0435

CVE-2023-0435 affects pyload/pyload (GitHub repo) prior to version 0.5.0b3.dev41. The underlying issue is an Excessive Attack Surface, leading to a high/critical risk (NVD score 9.8). Affected component is the pyload/pyload codebase; root cause described as too many attack surfaces. Remediation: ...

9.8CVSS6.7AI score0.0072EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/01/22 12:0 a.m.59 views

CVE-2023-0434

CVE-2023-0434 affects the Python-based download manager project pyload/pyload . The issue is described as an improper input validation vulnerability in versions prior to 0.5.0b3.dev40 . Affected component is the core input handling of pyload/pyload, with the underlying root cause being insufficie...

7.5CVSS6.4AI score0.00816EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/22 12:0 a.m.6 views

PT-2023-16267

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev41 Description The issue concerns an excessive attack surface in the GitHub repository pyload/pyload. Recommendations For versions prior to 0.5.0b3.dev41, update to version 0.5.0b3.dev41 or later to...

9.8CVSS6.1AI score0.0072EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2023/01/22 12:0 a.m.42 views

CVE-2023-0435 Excessive Attack Surface in pyload/pyload

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

4CVSS9.8AI score0.0072EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/22 12:0 a.m.6 views

CVE-2023-0434 Improper Input Validation in pyload/pyload

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS7.1AI score0.00816EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/01/22 12:0 a.m.6 views

pyload 安全漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in versions prior to pyload/pyload 0.5.0b3.dev41, which stems from the presence of too many attack surfac...

9.8CVSS5.6AI score0.0072EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/01/22 12:0 a.m.42 views

CVE-2023-0434 Improper Input Validation in pyload/pyload

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS7.8AI score0.00816EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/01/22 12:0 a.m.6 views

pyload 输入验证错误漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the web. An input validation error vulnerability exists in pyload versions prior to 0.5.0b3.dev40, which stems from improper input validation...

7.5CVSS6AI score0.00816EPSS
SaveExploits1References3
OSV
OSV
added 2023/01/22 12:0 a.m.20 views

CVE-2023-0435 Excessive Attack Surface in pyload/pyload

Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41...

4CVSS4.8AI score0.0072EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/22 12:0 a.m.26 views

CVE-2023-0434 Improper Input Validation in pyload/pyload

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS5.7AI score0.00816EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.6 views

PT-2023-8517 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyLoad versions prior to 0.5.0b3.dev78 Description: The issue is related to a Cross-Site Request Forgery CSRF attack. Since the session cookie is not set to SameSite: strict, this opens the library up to severe attack possibilities. Any API...

10CVSS8.9AI score0.00948EPSS
SaveExploits1References18
Github Security Blog
Github Security Blog
added 2023/01/14 3:30 a.m.104 views

Code Injection in pyload-ng

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS9.4AI score0.95845EPSS
SaveExploits13References6Affected Software1
OSV
OSV
added 2023/01/14 3:30 a.m.149 views

GHSA-PF38-5P22-X6H6 Code Injection in pyload-ng

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS9.6AI score0.95845EPSS
SaveExploits13References5
NVD
NVD
added 2023/01/14 3:15 a.m.24 views

CVE-2023-0297

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS9.8AI score0.95845EPSS
SaveExploits13References4
Prion
Prion
added 2023/01/14 3:15 a.m.21 views

Code injection

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

7.5CVSS9.6AI score0.95845EPSS
SaveExploits13References4Affected Software1
CNNVD
CNNVD
added 2023/01/14 12:0 a.m.6 views

pyload 代码注入漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A code injection vulnerability exists in pyload/pyload 0.5.0b3.dev31 and prior versions, which stems from an attacker being able to...

9.8CVSS8.3AI score0.95845EPSS
SaveExploits13References7
Vulnrichment
Vulnrichment
added 2023/01/14 12:0 a.m.7 views

CVE-2023-0297 Code Injection in pyload/pyload

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS9.7AI score0.95845EPSS
SaveExploits13References4
Positive Technologies
Positive Technologies
added 2023/01/14 12:0 a.m.7 views

PT-2023-16152

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev31 Description The issue concerns a code injection vulnerability in the pyload/pyload GitHub repository. It allows for pre-authentication remote code execution RCE due to the integration of JavaScript...

9.8CVSS8AI score0.95845EPSS
SaveExploits13References23
Cvelist
Cvelist
added 2023/01/14 12:0 a.m.39 views

CVE-2023-0297 Code Injection in pyload/pyload

Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...

9.8CVSS9.9AI score0.95845EPSS
SaveExploits13References4
Rows per page
Query Builder